Lucene search

OpenTextCVE-2024-6361

HistoryAug 05, 2024 - 7:15 p.m.

CVE-2024-6361

2024-08-0519:15:38

CWE-79

OpenText

web.nvd.nist.gov

opentext alm octane

xss vulnerability

remote code execution

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS4

7.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/S:N/AU:N/U:Red/R:A/V:C/RE:M

AI Score

7.1

Confidence

High

EPSS

Percentile

14.7%

JSON

Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all version prior to version 23.4. The vulnerability could cause remote code execution attack.

Affected configurations

Nvd

Node

opentextalm_octaneRange<23.4

VendorProductVersionCPE
opentextalm_octane*cpe:2.3:a:opentext:alm_octane:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opentext	alm_octane	*	cpe:2.3:a:opentext:alm_octane::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ALM Octane.",
    "vendor": "OpenText™",
    "versions": [
      {
        "lessThan": "23.4",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

portal.microfocus.com/s/article/KM000032605?language=en_US

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS4

7.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/S:N/AU:N/U:Red/R:A/V:C/RE:M

AI Score

7.1

Confidence

High

EPSS

Percentile

14.7%

JSON

Related for CVE-2024-6361