XSS in Micro Focus Netiq Self Service Password Reset.
CVE-2019-11647
A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.006 (47.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Micro Focus Netiq Self Service Password Reset. — versions All versions prior to version 4.4
- Microfocus Netiq_self_service_password_reset
Weakness classification (CWE)
References
- security@opentext.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2019-11647?
- CVE-2019-11647 is a medium-severity vulnerability in Micro Focus Netiq Self Service Password Reset., classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2019-06-24.
- How severe is CVE-2019-11647?
- Medium severity. CVSS v3 base score is 6.1 out of 10.