CVE-2024-7650CWE-94

Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4

Medium · published July 10, 2025

CVSS v4.0
6.3
EPSS
0%
Percentile
23.3
In the wild
Unconfirmed
What it is

Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote Code Inclusion. The

vulnerability could allow access to the system via script injection.This issue affects Directory Services: 23.4.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:A/V:D/RE:L/U:Clear
EPSS
0.00316 · 23.3th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-07-10T10:02Z
EPSS history
Timeline
  • 10 JUL 10:02Z
    Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4
    cvelistv5