OpenText uCMDB vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting OpenText uCMDB: 1 record(s), with affected versions and fixes.
CVE-2025-11884
Low · 2.3
CWE-79 Nov 19, 2025
Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts
This issue affects uCMDB: 24.4.