CVE-2024-12862

5.5 mediumEPSS 0.3%

Medium (5.5). EPSS 0.3% chance of exploitation in the next 30 days.

Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2025-04-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839115

Check your stack JSON