CVE-2024-5532

1.8 lowEPSS 0.2%

Low (1.8) in microfocus operations agent. EPSS 0.2% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent. The XSS vulnerability could allow an attacker with local admin permissions to manipulate the content of the internal status page of the Agent on the local system. This issue affects Operations Agent: 12.20, 12.21, 12.22, 12.23, 12.24, 12.25, 12.26.

Severity

CVSS 4.0

1.8 low

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:C/RE:M/U:Red

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-10-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:operations_agent

References

https://portal.microfocus.com/s/article/KM000035731?language=en_US

Check your stack JSON