Critical severityNVD Advisory· Published Mar 5, 2025· Updated Apr 15, 2026

CVE-2024-12799

Description

Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability could allow an authenticated user to obtain higher privileged user’s sensitive information via crafted payload.

This issue affects Identity Manager Advanced Edition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0.

Affected products

Opentext/Identity Manager Advanced Editionllm-create
Range: >=4.8.0.0 <=4.8.7.0102 and 4.9.0.0

Patches

Vulnerability mechanics

References

portal.microfocus.com/s/article/KM000037455nvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000