Vulnerability · Published Apr 21, 2025 · Assigned by OpenText

CVE-2024-12543A user enumeration and subsequent data integrity vulnerability affecting barcode functionality

Medium 5.9

In plain English

A medium-severity security flaw in OpenText Content Management from OpenText. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 4.0)5.9Medium
Exploit odds (30 days)0.3%top 72.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes.

Affected products (as reported)

VendorProductVersions
OpenText OpenText Content Management 24.3-25.1

Weakness: CWE-841 · Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

References