Medium severity · published Apr 21, 2025
CVE-2024-12863
Stored XSS in Discussions functionality
5.7
CVSS
0.4%
EPSS
No
On KEV
Description
Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OC
OpenText Content Management · OpenText
20.2-25.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-12863
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-12863
support.opentext.com
https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839121
More from OpenText Content Management
5.9
CVE-2024-12543
A user enumeration and subsequent data integrity vulnerability affecting barcode functionality
5.8
CVE-2025-8716
Cache exploitation vulnerability