CVE-2025-15591

UNKNOWN 0.0

Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page.

CWE	CWE-79
Vendor	opentext
Product	content management
Published	Oct 6, 2026

Stay Ahead of the Next One

Get instant alerts for opentext content management

Be the first to know when new unknown vulnerabilities affecting opentext content management are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

OpenText / Content Management

20.3 ≤ 25.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

support.opentext.com: https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0874468

Credits

Troy Fisher, IBM X-Force Red