PT-2024-36507

CVE-2024-5532

·

Published

2024-10-28

·

Updated

2025-10-14

Description by

CVSS 3.1
4.8
Medium
MetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions OpenText Operations Agent versions 12.20 through 12.26
Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This could allow an attacker with local admin permissions to manipulate the content of the internal status page of the Agent on the local system.
Recommendations For versions 12.20 through 12.26, update to a version that includes the fix for this issue to prevent potential exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2024-5532
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com