CVE-2026-18159: Medium severity vulnerability
Published Nov 5, 2026
·Updated
A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking.
This issue affects OpenText Directory Services (OTDS): from 10.5 through 26.2.
Event History
Nov 5, 2026
CVE Published
via MITRE·07:47 PM
Data Sourced
via MITRE·07:47 PM
DescriptionWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
An attacker must persuade a user to interact with a crafted interface, as indicated by the required user interaction in the CVSS vector. The issue is remotely reachable and does not require attacker privileges.
2
Which deployments are affected?
OpenText Directory Services (OTDS) deployments on Windows and Linux are affected from version 10.5 through 26.2.