CVE-2024-12863: Stored XSS in Discussions functionality
Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12863?
CVE-2024-12863 is rated as a high-severity vulnerability due to its ability to allow authenticated users to execute arbitrary code.
How do I fix CVE-2024-12863?
To fix CVE-2024-12863, you should apply the latest security patches provided by OpenText for Content Management CE.
Who is affected by CVE-2024-12863?
CVE-2024-12863 affects users of OpenText Content Management CE versions 20.2 to 25.1 on both Windows and Linux systems.
What type of vulnerability is CVE-2024-12863?
CVE-2024-12863 is a stored cross-site scripting (XSS) vulnerability that allows for code injection within the Discussions feature.
Can CVE-2024-12863 be exploited remotely?
CVE-2024-12863 requires authentication, meaning that it can only be exploited by malicious users already in the system.