Filr vulnerabilities

2 known vulnerabilities in Filr from OpenText. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Filr: Improper Neutralization of Input During Web Page Generation

  CVE-2025-10248Nov 9, 2026OpenText

  XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a malicious file and exercise Stored XSS attack.

• 9.8 Critical severity

  Filr: Missing Authorization

  CVE-2026-3266Mar 3, 2026OpenText

  Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted programs. This issue affects Filr: through 25.1.2.