Vulnerability · Published Oct 28, 2024 · Assigned by OpenText
CVE-2024-5532A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA).
Low 1.8
In plain English
A low-severity cross-site scripting in Operations Agent from OpenText™. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Official description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent. The XSS vulnerability could allow an attacker with local admin permissions to manipulate the content of the internal status page of the Agent on the local system. This issue affects Operations Agent: 12.20, 12.21, 12.22, 12.23, 12.24, 12.25, 12.26.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenText™ | Operations Agent | 12.2012.2112.2212.2312.2412.2512.26 |
Weakness: CWE-79 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:C/RE:M/U:Red