Threat Investigation
Request a demo

CVE-2024-10865

Critical

Description

Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5.

SeverityCritical
CVSS9.4
Exploit probability—
ProductAdvance Authentication
PublishedMay 14, 2025
First seenMay 14, 2025
Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Update
  • OpenText Advance Authentication< or later

Affected products

ProductAffected versionsFixed in
OpenText Advance Authentication6.5 ≤ v < <<

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.