Low severityNVD Advisory· Published Nov 19, 2025· Updated Jun 17, 2026

CVE-2025-11884

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts

This issue affects uCMDB: 24.4.

Affected products

Ucmdb/Ucmdbinferred
Range: = 24.4
Microfocus/uCMDBllm-create
Range: 24.4
Opentext/uCMDBllm-create
Range: 24.4

Patches

Vulnerability mechanics

References

portal.microfocus.com/s/article/KM000043674nvd

News mentions

No linked articles in our index yet.

cvss	0.065
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000