Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory
CVE-2021-38131

6.1MEDIUM

Key Information:

Vendor
Opentext
Status
Edirectory
Vendor
CVE Published:
12 September 2024

Summary

A Cross-Site Scripting (XSS) vulnerability has been identified in OpenText eDirectory 9.2.5.0000. This security flaw allows attackers to inject malicious scripts into web pages viewed by other users, potentially compromising sensitive information and user accounts. If exploited, this vulnerability could lead to unauthorized actions on behalf of users, making it crucial for organizations to address this issue promptly and implement necessary security measures.

Affected Version(s)

eDirectory Windows 9.2.0 <= 9.2.5.0000

References

https://www.netiq.com/documentation/edirectory-92/edirect...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.