MinorCritical vulnerability

CVE-2026-12559 (CVSS 7.3)

NVD · officialPublished Sep 24, 2026Risk 23/100

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application. Under certain conditions, this issue could allow execution of unauthorized script content in a user's browser, potentially impacting confidentiality and integrity of information processed through the application.

Technical details

CVSS

7.3

AV:NetworkAC:LowPR:HighUI:Passive

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source