CVE-2024-8125

MEDIUM EPSS 18.9%

Published Feb 4, 20251y ago · Modified Jun 17, 20261w ago

5.4 CVSS 4.0

Medium

Published Feb 4, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

Improper Validation of Specified Type of Input vulnerability in OpenText™ Content Management (Extended ECM) allows Parameter Injection. A bad actor with the required OpenText Content Management privileges (not root) could expose the vulnerability to carry out a remote code execution attack on the target system. This issue affects Content Management (Extended ECM): from 10.0 through 24.4 with WebReports module installed and enabled.

CVSS Details

Base Score

5.4

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:U/V:C/RE:H/U:Amber

Attack Vector Adjacent

Attack Complexity High

Privileges Required Low

User Interaction P

Scope P

Threat Intelligence

EPSS Exploit Probability

18.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-1287

References 1

support.opentext.com https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0834058

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.