Cross-site Scripting Vulnerability in OpenText Operations Agent
CVE-2024-5532

Currently unrated

Key Information:

Vendor
OpenText
Status
Operations Agent
Vendor
CVE Published:
28 October 2024

Summary

An XSS vulnerability in OpenText Operations Agent allows attackers with local admin permissions to alter the internal status page content of the Agent on the affected local systems. This could lead to unauthorized data manipulation and potential exploitation of user sessions. The issue affects several versions of the Operations Agent, emphasizing the need for users to update their software to mitigate risks associated with this vulnerability.

References

https://portal.microfocus.com/s/article/KM000035731?langu...

Timeline

  • Vulnerability published

.