CVE-2023-32260 A potential Misinterpretation of Input vulnerability has been identified in SMAX, AMX, and HCMX products.
Attackers can manipulate input data in OpenText SMAX, AMX, and HCMX products due to misinterpretation of input, potentially altering data integrity.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-32260?
CVE-2023-32260 is a medium-severity vulnerability in OpenText™ Asset Management X (AMX), published on 19 Mar 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Misinterpretation of Input vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX), and OpenText™ Hybrid Cloud Management X (HCMX) products. The vulnerability could allow Input data manipulation.This issue affects Service Management Automation X (SMAX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; Asset Management X (AMX) versions: 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; and Hybrid Cloud Management X (HCMX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05.
Weakness: CWE-115
Which versions are affected by CVE-2023-32260?
How do I fix CVE-2023-32260?
No fix has been published for CVE-2023-32260 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-32260 being exploited?
There is no known exploitation of CVE-2023-32260 in the wild and no public exploit code.
Sources
Also known as GHSA-258w-hr8p-8679.