Skip to content
Sign in
9.5 Critical

CVE-2025-15579 Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection.  The…

Description

Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection.  The vulnerability could lead to remote code execution, denial of service, or privilege escalation. This issue affects Directory Services: before 24.4.16, from 25.1 before 25.1.9, from 25.2 before 25.2.9, from 25.3 before 25.3.8, from 25.4 before 25.4.5, from 26.1 before 26.1.2.

Affected products and versions

Product Affected versions Fixed in
Directory Services 26.1 26.1 → < 26.1.2 26.1.2
Directory Services 25.4 25.4 → < 25.4.5 25.4.5
Directory Services 25.3 25.3 → < 25.3.8 25.3.8
Directory Services 25.2 25.2 → < 25.2.9 25.2.9
Directory Services 25.1 25.1 → < 25.1.9 25.1.9
Directory Services 24.4 earliest → < 24.4.16 24.4.16

Other CVEs of Directory Services

The 3 CVEs of Directory Services →
CVE-2026-1658 User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache… 5.3 Medium CVE-2024-7650 Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote… 6.3 Medium
Track this CVE