CVE-2025-15591: Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management
Published Oct 6, 2026
·Updated
Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page.
Affected Software
1 affected component
OpenText Content Management Content Server
Event History
Oct 6, 2026
CVE Published
via MITRE·01:28 PM
Data Sourced
via MITRE·01:28 PM
DescriptionWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which part of the product is affected?
The vulnerability is in the Forums feature of OpenText Content Management Content Server. It allows malicious code to be injected into a Forums web page.
2
What does exploitation require from a user?
The CVSS vector indicates user interaction is required. An attacker would need a user to interact with the affected Forums web page containing the injected code.
3
What is the likely impact if exploited?
The listed CVSS impacts indicate low impact to confidentiality and no listed impact to integrity or availability. The issue is classified as medium severity with a 5.3 CVSS score.