Netiq Self Service Password Reset

netiq_self_service_password_reset

Vendor: Microfocus • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-11850 1Microfocus 1Netiq Self Service Password Reset Jun 17, 2026 Aug 21, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6
CVE-2019-11674 1Microfocus 1Netiq Self Service Password Reset Jun 17, 2026 Oct 22, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle at...Show more Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack.Show less
CVE-2019-11652 1Microfocus 1Netiq Self Service Password Reset Jun 17, 2026 Aug 14, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions...Show more A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate.Show less
CVE-2019-11647 1Microfocus 1Netiq Self Service Password Reset Jun 17, 2026 Jun 24, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack.