CVE-2024-7650 | THREATINT

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote Code Inclusion. The vulnerability could allow access to the system via script injection.This issue affects Directory Services: 23.4.

PUBLISHED Reserved 2024-08-09 | Published 2025-07-10 | Updated 2025-07-10 | Assigner OpenText

MEDIUM: 6.3CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:A/V:D/RE:L/U:Clear

Problem types

CWE-94 Improper Control of Generation of Code ('Code Injection')

Product status

Default status

unaffected

23.4

affected

References

support.opentext.com/...henticated&sysparm_article=KB0844620

cve.org (CVE-2024-7650)

nvd.nist.gov (CVE-2024-7650)

Download JSON