Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-12559

Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OpenText

Description

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application. Under certain conditions, this issue could allow execution of unauthorized script content in a user's browser, potentially impacting confidentiality and integrity of information processed through the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText Vendor Invoice Management for SAP Solutions

Default version status: unaffected

  • VIM 7.6/20.4 to ≤ 0009affected
  • VIM 23.4 to ≤ 0004affected
  • VIM 25.4 to ≤ 0001affected

References