CVE-2024-7427 MEDIUM

CVE-2024-7427: Potential Cross-Site Scripting vulnerability affect OpenText™ Network Node Manager i (NNMi).

Vendor Opentext™
Product Network Node Manager i (NNMi)
Weakness CWE-79 · XSS
Published August 23, 2024
Last update August 23, 2024
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/S:N/AU:N/R:A/V:C/RE:L/U:Red

What the vulnerability does

01Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Network Node Manager i (NNMi) could allow Cross-Site Scripting (XSS).This issue affects Network Node Manager i (NNMi): 2022.11, 2023.05, 23.4, 24.2.

Key dates

02Disclosure timeline

August 23, 2024 CVE published
August 23, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-10233 SMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe Shortcode CVE-2025-1190 code-projects Job Recruitment load_user-profile.php cross site scripting CVE-2023-4604 Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting via 'post' CVE-2024-4268 Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks CVE-2018-25056 yolapi metadata.py render_description cross site scripting