Search vulnerabilities

Results 3

Export CSV
CVE-2016-1599

Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

CVSS 3.0 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
CVE-2020-25837

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors