CVE-2025-8716 MEDIUM

CVE-2025-8716: Cache exploitation vulnerability

Vendor Opentext

Product OpenText Content Management

Weakness CWE-754

Published September 11, 2025

Last update September 11, 2025

View on NVD All CVEs

CVSS base score

5.8/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

In Content Management versions 20.4- 25.3 authenticated attackers may exploit a complex cache poisoning technique to download unprotected files from the server if the filenames are known.

Key dates

02Disclosure timeline

September 11, 2025 CVE published

September 11, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-8716 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/754.html

Related vulnerabilities

CVE-2025-8716: Cache exploitation vulnerability

01Description

02Disclosure timeline

03References

04Related CVE