CVE-2024-4187

Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warned when clicking links to external sites.

Scoring

Severity

LOW

CVSS base score

2.1

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/S:P/AU:N/V:D/RE:L/U:Green

EPSS probability

0.24%

CWE

CWE-356

Published

2024-07-31

Last modified

2026-03-13

Affected products

• OpenText™ Filr
• OpenText™ Filr

Weakness type

• CWE-356

Related vulnerabilities

• CVE-2026-0777 — Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability
• CVE-2026-25805 — Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.
• CVE-2025-3839 — Epiphany: insecure external protocol invocation in epiphany
• CVE-2025-14414 — Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability
• CVE-2025-14415 — Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability
• CVE-2025-14412 — Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability
• CVE-2025-14418 — pdfforge PDF Architect XLS File Insufficient UI Warning Remote Code Execution Vulnerability
• CVE-2025-14417 — pdfforge PDF Architect Launch Insufficient UI Warning Remote Code Execution Vulnerability

Markdown version · Browse all CVEs