CVE-2010-5282: Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow rem...

Security readout for executives and security teams

OpenText ECM/Livelink 9.7.1 reportedly has multiple cross-site scripting flaws. A remote attacker could inject web script or HTML through specific request parameters, potentially affecting users who access crafted content in the application. The source bundle does not provide CVSS, vendor patch status, or evidence of active exploitation. Exposure is most likely where legacy OpenText ECM/Livelink 9.7.1 remains reachable by users or the internet. Risk depends on authentication, browser protections, session handling, and whether vulnerable DAV or browse paths are accessible. Prioritize if legacy OpenText ECM remains in production, especially if reachable beyond trusted networks. The business concern is user/session compromise through a core content-management platform, but urgency is reduced by missing CVSS and no confirmed active exploitation in the bundle. Mitigation focus: Inventory OpenText ECM/Livelink deployments and confirm whether version 9.7.1 is present.; Check OpenText vendor guidance for fixed versions or supported upgrade paths.; Restrict external access to legacy ECM interfaces where business use permits..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.