CVE-2021-22503

MEDIUM

OpenText eDirectory 9.2.3.0000 - XSS

Title source: llm

Description

Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0000.

References (1)

[Vendor Advisory] https://www.netiq.com/documentation/edirectory-92/edirectory924_releasenotes/data/edirectory924_releasenotes.html

Scores

CVSS v3 5.4

EPSS 0.0021

EPSS Percentile 42.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Classification

CWE

CWE-79

Status published

Affected Products (1)

microfocus/edirectory < 9.2.3.0000

Timeline

Published Sep 12, 2024

Tracked Since Feb 18, 2026