CVE-2026-3278

MEDIO 6.1CVE-2026-3278 · Published 18/03/2026 · updated 17/06/2026

En resumen

CVE-2026-3278 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a zenworks service desk (opentext).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.14%, mayor que el 3.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
zenworks service desk opentext	`= 25.2= 25.3`	No fix yet

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS). The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This issue affects ZENworks Service Desk: 25.2, 25.3.

References

portal.microfocus.com/s/article/KM000045873 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free