CVE-2013-6806

MEDIUM 6.8CVE-2013-6806 · Published 19/05/2014 · updated 17/06/2026

In short

CVE-2013-6806 is a MEDIUM (CVSS 6.8) vulnerability affecting exceed ondemand (opentext).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
exceed ondemand opentext	`= 8.0`	No fix yet

Description

OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext.

References

koto/exceed-mitm

More vulnerabilities in exceed ondemand

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free