CVE-2016-1599

Published: Mar 24, 2016Modified: May 6, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected (6)

Products: Microfocus: Self Service Password Reset

Microfocus

1 product

Self Service Password Reset

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microfocus Self Service Password Reset	Version 2.0
Microfocus Self Service Password Reset	Version 3.0
Microfocus Self Service Password Reset	Version 3.1
Microfocus Self Service Password Reset	Version 3.2
Microfocus Self Service Password Reset	Version 3.3.1
Microfocus Self Service Password Reset	Version 3.3