[ CVE-2026-12559 · Published 24 Sep 2026 ]

Vulnerability in OpenText Vendor Invoice Management for SAP Solutions

CVSS 7.3 EPSS <1%No fix listed yet

[ Description ]Official description

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application. Under certain conditions, this issue could allow execution of unauthorized script content in a user's browser, potentially impacting confidentiality and integrity of information processed through the application.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.