We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-5532

A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA).



AssignerOpenText
Reserved2024-05-30
Published2024-10-28
Updated2024-10-29

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent.  The XSS vulnerability could allow an attacker with local admin permissions to manipulate the content of the internal status page of the Agent on the local system. This issue affects Operations Agent: 12.20, 12.21, 12.22, 12.23, 12.24, 12.25, 12.26.



LOW: 1.8CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:C/RE:M/U:Red

Product status

Default status
unaffected

12.20
affected

12.21
affected

12.22
affected

12.23
affected

12.24
affected

12.25
affected

12.26
affected

Credits

Marco Ventura, Claudia Bartolini, Massimiliano Brolli - TIM Group finder

References

https://portal.microfocus.com/s/article/KM000035731?language=en_US

cve.org CVE-2024-5532

nvd.nist.gov CVE-2024-5532

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.