Skip to content
OpenAdvisories
Low · 2.3 CVE-2025-11884 EUVD-2025-198222GHSA-wr3x-gv3f-3792

Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB

Published Nov 19, 2025 · Updated Nov 20, 2025 · Assigned by OpenText

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts

This issue affects uCMDB: 24.4.

Affected products

VendorProductAffectedFixed
OpenText™ uCMDB 24.4 —

References