Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Microfocus Subscribe
Filtered by product Self Service Password Reset
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-25837 1 Microfocus 1 Self Service Password Reset 2021-07-21 4.3 MEDIUM 7.5 HIGH
Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information.
CVE-2016-1599 1 Microfocus 1 Self Service Password Reset 2021-04-13 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.