What is the CVSS score of CVE-2025-0885?

CVE-2025-0885 has a CVSS 4.0 base score of 1.8 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:P/AU:Y/R:A/V:D/RE:L/U:Green. EPSS exploitation probability: 0.0%.

Which versions of OpenText are affected by CVE-2025-0885?

CVE-2025-0885 is a low-severity vulnerability (CVSS 1.8). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.

How to fix or mitigate CVE-2025-0885?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

OpenText CVE-2025-0885

EUVD-2025-19845 LOW

Incorrect Authorization (CWE-863)

2025-07-03 security@opentext.com

Authentication Bypass

1.8

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.8 LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:P/AU:Y/R:A/V:D/RE:L/U:Green

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:P/AU:Y/R:A/V:D/RE:L/U:Green

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 02:12 euvd

EUVD-2025-19845

Analysis Generated

Mar 16, 2026 - 02:12 vuln.today

CVE Published

Jul 03, 2025 - 10:15 nvd

LOW 1.8

DescriptionCVE.org

Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels.

The vulnerability could allow unauthorized access to calendar items marked private.

This issue affects GroupWise versions 7 through 17.5, 23.4, 24.1, 24.2, 24.3, 24.4.

AnalysisAI

CVE-2025-0885 is a security vulnerability (CVSS 1.8) that allows unauthorized access. Remediation should follow standard vulnerability management procedures.