CVE 2.3 LOW

Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB_CVE-2025-11884

2.3 / 10
LOW
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:L/S:N/AU:Y/R:U/V:C/RE:L/U:Green

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts

This issue affects uCMDB: 24.4.

Basic Information

ID CVE-2025-11884
Source OpenText
Published Nov 19, 2025 at 21:13

Affected Product

Vendor OpenText™
Product uCMDB
Version 24.4
Affected Versions OpenText™ uCMDB 24.4

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.