Lucene search

K
cvelistOpenTextCVELIST:CVE-2024-6361
HistoryAug 05, 2024 - 6:22 p.m.

CVE-2024-6361 Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane product.

2024-08-0518:22:14
CWE-79
OpenText
www.cve.org
6
cve-2024-6361
xss
opentext alm octane
remote code execution

CVSS4

7.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/S:N/AU:N/U:Red/R:A/V:C/RE:M

EPSS

0

Percentile

14.7%

Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all version prior to version 23.4. The vulnerability could cause remote code execution attack.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ALM Octane.",
    "vendor": "OpenText™",
    "versions": [
      {
        "lessThan": "23.4",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

CVSS4

7.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/S:N/AU:N/U:Red/R:A/V:C/RE:M

EPSS

0

Percentile

14.7%

Related for CVELIST:CVE-2024-6361