Medium severityNVD Advisory· Published Apr 21, 2025· Updated Apr 15, 2026

CVE-2024-12863

Description

Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.

Affected products

Opentext/Content Management CEllm-create
Range: 20.2 to 25.1

Patches

Vulnerability mechanics

References

support.opentext.com/csmnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000