What’s Vulnerable › Vulnerabilities
CVE-2023-32266: Code injection vulnerability found in OpenText Application Lifecycle Management (ALM),Quality Center.
- Severity: medium (CVSS 5.3 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-10-16 · updated 2026-06-17
- Weakness: CWE-426
Description
Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user to archive a malicious DLLs on the system prior to the installation. This issue affects Application Lifecycle Management (ALM),Quality Center: 15.00, 15.01, 15.01 P1, 15.01 P2, 15.01 P3, 15.01 P4, 15.01 P5, 15.51, 15.51 P1, 15.51 P2, 15.51 P3, 16.00, 16.01 P1.
Affected products
- OpenText Alm Quality Center: 15.00, 15.01, 15.01_p1, 15.01_p2, 15.01_p3, 15.01_p4 (+7)
References
Get alerted when CVE-2023-32266 or the next vulnerability affects your stack