CVE-2025-10698

CVSS 6.0 (medium) · published 2026-11-12

Incorrect default permissions and Product released in Non-Release configuration vulnerability in OpenText Identity Console on Windows, Linux, and 64 bit allows Retrieve Embedded Sensitive Data. This issue affects Identity Console: from 1.8 through 25.2.

Weakness: CWE-276, CWE-1269

Source: NVD CVE-2025-10698

References

• https://docs.microfocus.com/doc/29/25.4/securityandsoftwarefixes

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.