This vulnerability is classified as CWE-79, indicating improper neutralization of input during web page generation leading to stored cross-site scripting. The flaw exists in the Capture Validation component of OpenText Vendor Invoice Management for SAP Solutions, enabling attackers to inject malicious scripts that execute in users' browsers. The CVSS 4.0 base score is 7.3, reflecting network attack vector, low attack complexity, high impact on confidentiality, integrity, and availability, and requiring high privileges with user interaction.

Successful exploitation could allow attackers to execute unauthorized scripts in the context of the affected application, potentially leading to disclosure or modification of sensitive information processed by the system. This impacts the confidentiality and integrity of data handled by the application. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or workaround information is provided, users should monitor OpenText advisories for updates and apply any official fixes once available.