{"id":"CVE-2025-11761","state":"PUBLISHED","title":"HP Client Management Script Library – Security Update","description":"A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability.","publishedAt":"2025-11-03T15:13:39.263Z","updatedAt":"2026-02-26T17:47:40.431Z","severity":{"score":8.5,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","source":"hp"},"assigner":"hp","products":["HP Inc HP Client Management Script Library"],"affected":[{"vendor":"HP Inc","product":"HP Client Management Script Library","defaultStatus":"unknown","versions":[{"version":"1.0.0","status":"affected","lessThan":"<1.85","versionType":"custom"}]}],"references":["https://support.hp.com/us-en/document/ish_13187651-13187675-16/hpsbhf04058"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/11xxx/CVE-2025-11761.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-11761","state":"PUBLISHED","datePublished":"2025-11-03T15:13:39.263Z","dateUpdated":"2026-02-26T17:47:40.431Z","assignerShortName":"hp","assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateReserved":"2025-10-14T20:23:06.506Z"},"containers":{"cna":{"title":"HP Client Management Script Library – Security Update","descriptions":[{"lang":"en","value":"A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability."}],"affected":[{"vendor":"HP Inc","product":"HP Client Management Script Library","defaultStatus":"unknown","versions":[{"version":"1.0.0","status":"affected","lessThan":"<1.85","versionType":"custom"}]}],"references":[{"url":"https://support.hp.com/us-en/document/ish_13187651-13187675-16/hpsbhf04058"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.5,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-427","description":"CWE-427 Uncontrolled Search Path Element","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"hp","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateUpdated":"2025-11-03T15:13:39.263Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-11761","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-11-04T04:55:15.850715Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T17:47:40.431Z"}}]}}}