Vulnerability Details CVE-2019-11648
An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2019-11648
-
cpe:2.3:a:netiq:self_service_password_reset:2.0
-
cpe:2.3:a:netiq:self_service_password_reset:3.0
-
cpe:2.3:a:netiq:self_service_password_reset:3.1
-
cpe:2.3:a:netiq:self_service_password_reset:3.2
-
cpe:2.3:a:netiq:self_service_password_reset:3.3
-
cpe:2.3:a:netiq:self_service_password_reset:3.3.1