CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2019-11647

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 47.2%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p2/data/release-notes-sspr-44-p2.html
https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p2/data/release-notes-sspr-44-p2.html

Products affected by CVE-2019-11647

Microfocus » Netiq Self Service Password Reset » Version: 4.0

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.0
Microfocus » Netiq Self Service Password Reset » Version: 4.1

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.1
Microfocus » Netiq Self Service Password Reset » Version: 4.2

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.2
Microfocus » Netiq Self Service Password Reset » Version: 4.3

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11647

Products

Pricing

Contact Us