OpenText UCMDB Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in OpenText Universal Configuration Management Database (UCMDB) version 24.4. This issue arises from improper input neutralization during web page generation, allowing an attacker with high-level access to UCMDB to inject malicious scripts into the data. The vulnerability could be exploited when the injected scripts are executed in the context of the user viewing the data.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the data.

Remediation

Users are advised to upgrade to version 25.2 or later of OpenText Operations Bridge Manager.