CVE-2022-41221 - CVE House
Back to Database
Status published Unknown CVE-2022-41221

The client in OpenText Archive Center Administration through 21.2 allows...

Vulnerability Description

The client in OpenText Archive Center Administration through 21.2 allows XXE attacks. Authenticated users of the OpenText Archive Center Administration client (Versions 16.2.3, 21.2, and older versions) could upload XML files to the application that it did not sufficiently validate. As a result, attackers could craft XML files that, when processed by the application, would cause a negative security impact such as data exfiltration or localized denial of service against the application instance and system of the user running it.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-41221

Credits & Attribution

No credits recorded in the NVD database.

References

More from opentext

View All →
CVE-2025-8053
Insufficient access control vulnerability has been discovered in Opentext Flipper.
Low 1
CVE-2025-8052
HQL Injection vulnerability has been discovered in Opentext Flipper.
Low 1
CVE-2025-8051
Path traversal validation vulnerability has been discovered in opentext Flipper.
Medium 5.3
CVE-2025-8050
External Control of File vulnerability has been discovered in opentext Flipper.
Medium 5.3
CVE-2025-8049
Insufficient Access Control vulnerability has been discovered in OpenText Flipper.
Low 2.3

Affected Vendor

Affected Software

archive center administration
Vulnerable Versions:
0

Timeline

Official Publish: May 24th, 2023
Last Modified: January 17th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.