VULNERABILITY INTELLIGENCE

CVE-2024-7085

EPSS probability0.41%
CISA KEVNot currently listed
Published2025-01-15
Last modified2026-06-17

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Solutions Business Manager (SBM) allows Stored XSS.  The vulnerability could result in the exposure of private information to an unauthorized actor. This issue affects Solutions Business Manager (SBM): through 12.2.1.

Weakness classification

  • security@opentext.com: CWE-79

Primary references