CVE-2026-12559

— UNSCORED

Published 2026-09-24 · Updated 2026-09-24

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application. Under certain conditions, this issue could allow execution of unauthorized script content in a user's browser, potentially impacting confidentiality and integrity of information processed through the application.

Weaknesses

CWE-79

All references

https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0869040
https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0869044

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-13533PoC
MEDIUMCVE-2025-14814
LOWCVE-2025-15677
MEDIUMCVE-2025-15696
LOWCVE-2025-15698
MEDIUMCVE-2025-36147
HIGHCVE-2025-61682PoC
MEDIUMCVE-2025-71419PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.