CVE-2024-6361 HIGH

CVE-2024-6361: Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane product.

Vendor Opentext™
Product ALM Octane.
Weakness CWE-79 · XSS
Published August 5, 2024
Last update November 1, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:C/RE:M/U:Red

What the vulnerability does

01Description

Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all version prior to version 23.4. The vulnerability could cause remote code execution attack.

Key dates

02Disclosure timeline

August 5, 2024 CVE published
November 1, 2024 Record updated