Medium severity · published Apr 21, 2025
CVE-2024-12862
REST API allows users without permissions to remove external collaborators
5.5
CVSS
0.3%
EPSS
No
On KEV
Description
Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Content Server · OpenText
20.2-24.4 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-12862
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-12862
support.opentext.com
https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839115
More from Content Server
5.4
CVE-2021-3010
There are multiple persistent cross-site scripting (XSS) vulnerabilities in the web interface of OpenText Content Server Version 20.3