CVE-2025-11884 is a stored cross-site scripting (XSS) vulnerability in OpenText uCMDB version 24.4. It arises from improper neutralization of input during web page generation, allowing an attacker with high-level access to inject malicious scripts by creating or updating data. The vulnerability has a low CVSS score of 2.3, indicating limited impact and exploitability.