CVE-2016-1599

The CVE-2016-1599 entry concerns NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2. The vulnerability is a cross-site scripting (XSS) flaw triggered by a crafted URL, allowing remote attackers to inject arbitrary web script or HTML in the user’s browser. The available connecte...