OpenText Advanced Authentication Server
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-112256 | 6.4.0.0 – 6.4.3.8 ; 6.5.0.0 – 6.5.0.10 ; 6.6.0.0 – 6.6.1.0 | Logon bypass (trust of attacker-controlled completed-methods list) | CRITICAL 9.2 | |||
| CVE-2026-112255 | 6.4.0.0 – 6.4.3.x ; 6.5.0.0 – 6.5.0.x ; 6.6.0.0 – 6.6.1.0 | Endpoint credential minting (insecure default allow-list) | LOW 2.9 |