microfocus netiq self service password reset vulnerabilities and exploits

(subscribe to this query)

5.9

CVSSv3

Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions before 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack.

Microfocus Netiq Self Service Password Reset Microfocus Netiq Self Service Password Reset 4.4

6.1

CVSSv3

Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x prior to 3.3.1 HF2 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL.

Microfocus Self Service Password Reset 3.0 Microfocus Self Service Password Reset 2.0 Microfocus Self Service Password Reset 3.1 Microfocus Self Service Password Reset 3.3 Microfocus Self Service Password Reset 3.3.1 Microfocus Self Service Password Reset 3.2

6.1

CVSSv3

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack.

Microfocus Netiq Self Service Password Reset

9.8

CVSSv3

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate.

Microfocus Netiq Self Service Password Reset

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook