OpenText Digital Asset Management SQL Injection Vulnerability

A SQL injection vulnerability has been identified in OpenText Digital Asset Management versions through 24.4. This vulnerability allows authenticated users to execute arbitrary SQL commands on the underlying database. While the database remains uncompromised with no data loss or information leakage, the potential for executing unauthorized SQL commands poses a significant risk.

Impact

Exploitation of this vulnerability could allow an authenticated user to execute arbitrary SQL commands on the database, potentially leading to unauthorized data manipulation or access.

Remediation

This vulnerability is resolved in OpenText Digital Asset Management version 25.1 for containerized deployments. For off-cloud deployments, hotfixes are available for version 22.4 and 24.4.