OpenText Content Management Remote Code Execution Vulnerability in WebReports Module

A remote code execution vulnerability has been identified in OpenText Content Management (Extended ECM) versions 10.0 through 24.4, specifically within the WebReports module. This vulnerability arises from improper validation of input, allowing parameter injection. A user with the necessary OpenText Content Management privileges (excluding root) could exploit this vulnerability to execute arbitrary code on the target system.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users are advised to refer to OpenText Knowledge Base article KB0833739 or contact OpenText support through the My Support Portal to obtain the hotfix.