CVE-2025-11884CWE-79cross-site-scripting

CVE-2025-11884

published November 20, 2025

CVSS
2.3
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts

This issue affects uCMDB: 24.4.

The record
Technical detail
CVSS
2.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00232 · 13.3th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-11-20T03:16Z
References (1)
https://portal.microfocus.com/s/article/KM000043674?language=en_US · [email protected]
EPSS history
Timeline
  • 19 NOV 21:13Z
    Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB
    cvelistv5