CVE-2024-7085 - CVE House

Back to Database

Status published High CVE-2024-7085

Exposure of private information vulnerability has been discovered in OpenText™ Solutions Business Manager (SBM).

8.2 CVSS

Vulnerability Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Solutions Business Manager (SBM) allows Stored XSS. The vulnerability could result in the exposure of private information to an unauthorized actor. This issue affects Solutions Business Manager (SBM): through 12.2.1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-7085

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Wiktoria Lewandowska

References

https://portal.microfocus.com/s/article/KM000036201?language=en_US

More from OpenText™

View All →

Stored-XSS vulnerability discovered in OpenText WSM Management Server.

RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.

SSRF vulnerability have been discovered in OpenText™ XM Fax

Path Traversal vulnerability have been discovered in OpenText™ XM Fax.

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability...

Affected Vendor

OpenText™

View all reports →

Affected Software

Solutions Business Manager (SBM)

Vulnerable Versions:

0

Timeline

Official Publish: January 15th, 2025

Last Modified: January 15th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1189 Drive-by Compromise

T1059.007 JavaScript

T1539 Steal Web Session Cookie

T1213 Data from Information Repositories

T1567 Exfiltration Over Web Service

T1491.001 Defacement