Cross-Site Scripting Vulnerability in Self Service Password Reset by Micro Focus
CVE-2019-11647

6.1MEDIUM

Key Information:

Vendor

Micro Focus

Status
Micro Focus Netiq Self Service Password Reset.
Vendor
CVE Published:
24 June 2019

What is CVE-2019-11647?

A vulnerability exists in the Self Service Password Reset feature of Micro Focus NetIQ Software that could allow an attacker to perform Cross-Site Scripting (XSS) attacks. This vulnerability affects all versions prior to 4.4. If exploited, malicious scripts could compromise user data and session integrity, posing significant security risks for users.

Affected Version(s)

Micro Focus NetIQ Self Service Password Reset. All versions prior to version 4.4

References

https://www.netiq.com/documentation/self-service-password...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.