CVE-2025-10248: XSS vulnerability in OpenText Filr

Published Nov 9, 2026

Updated

XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a malicious file and exercise Stored XSS attack.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenText Filr Appliance to a version that resolves this vulnerability.
Fixed in 25.4

Event History

Nov 9, 2026

CVE Published

via MITRE·03:18 PM

Data Sourced

via MITRE·03:18 PM

RemedyDescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must be authenticated to the affected OpenText Filr Appliance and able to upload a malicious file.

Which deployments are affected?

OpenText Filr Appliance versions up to 25.1.2 are identified as affected. The available information does not state whether any particular default configuration changes exposure.

What is the impact after exploitation?

A successful attack can result in stored cross-site scripting, causing malicious script contained in an uploaded file to be exercised when it is rendered or otherwise accessed.

CVE-2025-10248: XSS vulnerability in OpenText Filr

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What is the impact after exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What is the impact after exploitation?