CVE-2024-5532 | THREATINT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent. The XSS vulnerability could allow an attacker with local admin permissions to manipulate the content of the internal status page of the Agent on the local system. This issue affects Operations Agent: 12.20, 12.21, 12.22, 12.23, 12.24, 12.25, 12.26.

Reserved 2024-05-30 | Published 2024-10-28 | Updated 2024-10-29 | Assigner OpenText

LOW: 1.8CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:C/RE:M/U:Red

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

Default status

unaffected

12.20

affected

12.21

affected

12.22

affected

12.23

affected

12.24

affected

12.25

affected

12.26

affected

Credits

Marco Ventura, Claudia Bartolini, Massimiliano Brolli - TIM Group finder

References

portal.microfocus.com/s/article/KM000035731?language=en_US

cve.org (CVE-2024-5532)

nvd.nist.gov (CVE-2024-5532)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.