[ CVE-2025-15591 · Published 6 Oct 2026 ]
Vulnerability in OpenText Content Management
CVSS 5.3
EPSS <1%No fix listed yet
[ Description ]Official description
Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.