Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ucmdb

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts

This issue affects uCMDB: 24.4.

CVE-2025-11884 is a stored Cross-site Scripting (XSS) vulnerability identified in OpenText's Universal Configuration Management Database (uCMDB) version 24.4. The vulnerability stems from improper neutralization of input during web page generation, classified under CWE-79. Specifically, an attacker who already possesses high-level access privileges to the uCMDB can create or update data entries containing malicious scripts. These scripts are then stored and rendered in the application's web interface, potentially executing in the context of other users viewing the affected pages. The vulnerability does not require user interaction to trigger once the malicious payload is stored, but exploitation complexity is high because it requires elevated privileges (limited privileges) and no direct user interaction. The CVSS v4.0 base score is 2.3, reflecting low impact on confidentiality, integrity, and availability, with network attack vector and high attack complexity. No known exploits have been reported in the wild as of the publication date. The vulnerability could allow attackers to perform actions such as session hijacking, defacement, or redirecting users to malicious sites, but only within the scope of users who access the compromised data in uCMDB. Given uCMDB's role in IT asset and configuration management, exploitation could indirectly affect IT operations and security monitoring if attackers manipulate configuration data or inject misleading information. The vulnerability highlights the importance of proper input validation and output encoding in web applications, especially those managing critical enterprise infrastructure data.

Detailed information about CVE-2025-11884: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in OpenText™ uCMDB

CVE-2025-11884: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in OpenText™ uCMDB - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11884: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in OpenText™ uCMDB

Threats Tagged 'cve-2025-11884'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-11884'

Lead Pen Test Professional