Riskcovery

CVE-2025-13671

Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.

State
Published
Severity
5.9 Medium
Published
Feb 19, 2026
Updated
Feb 24, 2026
Reserved
Nov 25, 2025

Read the record on cve.org

Description

Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously.

This issue affects Web Site Management Server: 16.7.0, 16.7.1.

Scores

CVSSScoreVectorSource
4.05.9 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:L/SI:N/SA:N/S:P/AU:N/R:U/V:D/RE:H/U:RedOpenText

Weaknesses

  • CWE-352 Cross-Site Request Forgery (CSRF)

Affected Products

ProductVersions
Web Site Management ServerOpenText™
  • 16.7.0Affected
  • 16.7.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.