CVE-2025-11761

HIGH

HP Client Management Script Library < 1.8.5 - Uncontrolled Search Path

Title source: rule
STIX 2.1

Description

A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability.

References (1)

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 6.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-427
Status published
Products (1)
hp/client_management_script_library < 1.8.5
Published Nov 03, 2025
Tracked Since Feb 18, 2026