Log in Start free

Vulnerability · Published Feb 4, 2025 · Assigned by OpenText

CVE-2024-8125A remote code vulnerability has been discovered in OpenText™ Content Management.

Medium 5.4

In plain English

A medium-severity security flaw in Content Management (Extended ECM) from OpenText™. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 4.0)5.4Medium
Exploit odds (30 days)0.3%top 79.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper Validation of Specified Type of Input vulnerability in OpenText™ Content Management (Extended ECM) allows Parameter Injection.  A bad actor with the required OpenText Content Management privileges (not root) could expose the vulnerability to carry out a remote code execution attack on the target system. This issue affects Content Management (Extended ECM): from 10.0 through 24.4  with WebReports module installed and enabled.

Affected products (as reported)

VendorProductVersions
OpenText™ Content Management (Extended ECM) 10.0 – through 24.4

Weakness: CWE-1287 · Vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/S:P/AU:N/R:U/V:C/RE:H/U:Amber

References