What’s Vulnerable › Vulnerabilities

CVE-2024-12862: REST API allows users without permissions to remove external collaborators

• Severity: medium (CVSS 5.5 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-21 · updated 2026-06-17
• Weakness: CWE-863

Description

Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.

Affected products

• OpenText Content Server: 20.2-24.4

References

• https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839115

Get alerted when CVE-2024-12862 or the next vulnerability affects your stack