Lucene search
OpenTextCVE-2020-11850HistoryAug 21, 2024 - 1:15 p.m.
CVE-2020-11850
2024-08-2113:15:04
CWE-20
CWE-79
OpenText
web.nvd.nist.gov
23
opentext
input validation
cross-site scripting
self service password reset
vulnerability
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
EPSS
0.001
Percentile
17.7%
Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6
Affected configurations
Node
microfocusnetiq_self_service_password_resetRange<4.4
ORmicrofocusnetiq_self_service_password_resetMatch4.4-
ORmicrofocusnetiq_self_service_password_resetMatch4.4update_1
ORmicrofocusnetiq_self_service_password_resetMatch4.4update_2
ORmicrofocusnetiq_self_service_password_resetMatch4.4update_3
ORmicrofocusnetiq_self_service_password_resetMatch4.4update_4
ORmicrofocusnetiq_self_service_password_resetMatch4.4update_5
ORmicrofocusnetiq_self_service_password_resetMatch4.5-
ORmicrofocusnetiq_self_service_password_resetMatch4.5update_1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microfocus | netiq_self_service_password_reset | * | cpe:2.3:a:microfocus:netiq_self_service_password_reset:*:*:*:*:*:*:*:* |
| microfocus | netiq_self_service_password_reset | 4.4 | cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:-:*:*:*:*:*:* |
| microfocus | netiq_self_service_password_reset | 4.4 | cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_1:*:*:*:*:*:* |
| microfocus | netiq_self_service_password_reset | 4.4 | cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_2:*:*:*:*:*:* |
| microfocus | netiq_self_service_password_reset | 4.4 | cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_3:*:*:*:*:*:* |
| microfocus | netiq_self_service_password_reset | 4.4 | cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_4:*:*:*:*:*:* |
| microfocus | netiq_self_service_password_reset | 4.4 | cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_5:*:*:*:*:*:* |
| microfocus | netiq_self_service_password_reset | 4.5 | cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.5:-:*:*:*:*:*:* |
| microfocus | netiq_self_service_password_reset | 4.5 | cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.5:update_1:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Self Service Password Reset",
"vendor": "OpenText",
"versions": [
{
"lessThan": "<",
"status": "affected",
"version": "4.5.0.2",
"versionType": "server"
}
]
}
]
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
EPSS
0.001
Percentile
17.7%
Related for CVE-2020-11850