Description
Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.
Published: 2025-04-21
Score: 5.6 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-12374 Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.
History

Mon, 21 Apr 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 21 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
Description Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.
Title Stored XSS in Discussions functionality
Weaknesses CWE-79
References
Metrics cvssV4_0

{'score': 5.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: OpenText

Published:

Updated: 2025-04-21T15:24:29.951Z

Reserved: 2024-12-20T18:07:11.848Z

Link: CVE-2024-12863

cve-icon Vulnrichment

Updated: 2025-04-21T15:24:26.178Z

cve-icon NVD

Status : Deferred

Published: 2025-04-21T15:15:58.070

Modified: 2026-04-15T00:35:42.020

Link: CVE-2024-12863

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses