CVE-2024-5532CWE-79

A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA).

Low · published October 28, 2024

CVSS v4.0
1.8
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent.

The XSS vulnerability could allow an attacker with local admin permissions to manipulate the content of the internal status page of the Agent on the local system.

This issue affects Operations Agent: 12.20, 12.21, 12.22, 12.23, 12.24, 12.25, 12.26.

The record
Technical detail
CVSS v4.0
1.8 · LOW
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:C/RE:M/U:Red
EPSS
0.00189 · 8.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-10-28T18:52Z
EPSS history
Timeline
  • 28 OCT 18:52Z
    A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA).
    cvelistv5