CVE-2024-12863
Stored XSS in Discussions functionality
- State
- Published
- Severity
- 5.6 Medium
- Published
- Apr 21, 2025
- Updated
- Apr 21, 2025
- Reserved
- Dec 20, 2024
Description
Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.6 Medium | CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N | OpenText |
Weaknesses
- CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
Affected Products
| Product | Versions |
|---|---|
OpenText Content ManagementOpenText |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.