CVE-2025-0884

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Unquoted Search Path or Element vulnerability in OpenText™ Service Manager. 

The vulnerability could allow a user to gain SYSTEM privileges through Privilege Escalation.

This issue affects Service Manager: 9.70, 9.71, 9.72.

Metrics

CVSS 4.0 7.3/10CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:A/V:C/RE:M/U:Green

Weakness enumeration

CWE-428

Affected software

No affected versions have been published.

Timeline

Published
Mar 12, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-08851.8Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels. The vCVE-2025-08867.8An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escCVE-2025-08897.8Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the maCVE-2025-08909.8**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware versionCVE-2025-08937.8Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability.CVE-2025-08952.4IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debuCVE-2025-08969.8Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unCVE-2025-08975.4The Modal Window – create popup modal window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframeBox' CVE-2025-08986.5The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 1.4.7 viaCVE-2025-08998.8PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrCVE-2025-09003.3PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to dCVE-2025-09018.8PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute
CVE-2025-0884: High severity, CVSS 7.3 | Vulnix