Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-13671

Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.

Description

Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously. This issue affects Web Site Management Server: 16.7.0, 16.7.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText™ Web Site Management Server

Default version status: unaffected

  • 16.7.0affected
  • 16.7.1affected

References