Log in Start free

Vulnerability · Published Jan 15, 2025 · Assigned by OpenText

CVE-2024-7085Exposure of private information vulnerability has been discovered in OpenText™ Solutions Business Manager (SBM).

High 8.2

In plain English

A high-severity cross-site scripting in Solutions Business Manager (SBM) from OpenText™. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).

Severity (CVSS 4.0)8.2High
Exploit odds (30 days)0.4%top 64.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Solutions Business Manager (SBM) allows Stored XSS.  The vulnerability could result in the exposure of private information to an unauthorized actor. This issue affects Solutions Business Manager (SBM): through 12.2.1.

Affected products (as reported)

VendorProductVersions
OpenText™ Solutions Business Manager (SBM) 0 – through 12.2.1

Weakness: CWE-79 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/S:N/AU:N/R:A/V:C/RE:M/U:Red

References