High severity · published Jan 15, 2025
CVE-2024-7085
Exposure of private information vulnerability has been discovered in OpenText™ Solutions Business Manager (SBM).
8.2
CVSS
0.4%
EPSS
No
On KEV
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Solutions Business Manager (SBM) allows Stored XSS.
The vulnerability could result in the exposure of private information to an unauthorized actor.
This issue affects Solutions Business Manager (SBM): through 12.2.1.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SB
Solutions Business Manager (SBM) · OpenText™
through 12.2.1 · source: vendor
Affected product
SB
Solutions Business Manager (SBM)
OpenText™