Microfocus Self Service Password Reset vulnerabilities

2 vulnerabilities

Known vulnerabilities in Microfocus Self Service Password Reset, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2016-1599microfocusself_service_password_reset
EPSS score
1.41%
Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.7.5CVE-2020-25837microfocusself_service_password_reset
EPSS score
1.06%
Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information.