Cross-site Scripting Vulnerability in OpenText Content Management Server Forums
CVE-2025-15591

5.3MEDIUM

Key Information:

Vendor

Opentext
Status
Content Management
Vendor
CVE Published:
6 October 2026

What is CVE-2025-15591?

A cross-site scripting (XSS) vulnerability exists in the Forums feature of OpenText Content Management Content Server. This flaw enables attackers to inject malicious scripts into web pages presented to users. If exploited, this vulnerability can lead to unauthorized actions, data theft, and session hijacking, compromising the security of both users and the server. Proper validation of user inputs is crucial to mitigate this risk and protect against potential exploitations.

Affected Version(s)

Content Management Windows 20.3 <= 25.2

References

https://support.opentext.com/csm?id=ot_kb_unauthenticated...
vendor-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Troy Fisher, IBM X-Force Red
.