Skip to content
OpenAdvisories
High · 8.6 CVE-2024-10923 EUVD-2024-33352GHSA-3wr4-2chq-phgj

Improper Neutralization vulnerability has been discovered in OpenText™ ALM Octane Management.

Published Nov 12, 2024 · Updated Nov 21, 2024 · Assigned by OpenText

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ ALM Octane Management allows Stored XSS. The vulnerability could result in a remote code execution attack.

This issue affects ALM Octane Management: from 16.2.100 through 24.4.

Affected products

VendorProductAffectedFixed
OpenText™ ALM Octane Management 16.2.100 – ≤ 24.4 —

References