CVE-2024-12863

Stored XSS in Discussions functionality

CVSS 5.6 MEDIUMEPSS 0.3%CWE-79

Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

Affected products

OpenText · OpenText Content Management

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839121