CVE-2020-11850

Опубликовано: 21 авг. 2024

Источник: nvd

CVSS3: 7.3

CVSS3: 6.1

EPSS Низкий

Описание

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6

Ссылки

https://www.netiq.com/documentation/self-service-password-reset-45/sspr-4502-release-notes/data/sspr-4502-release-notes.html#b149gz5h
Release Notes

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microfocus:netiq_self_service_password_reset:*:*:*:*:*:*:*:*

Версия до 4.4 (исключая)

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:-:*:*:*:*:*:*

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_1:*:*:*:*:*:*

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_2:*:*:*:*:*:*

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_3:*:*:*:*:*:*

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_4:*:*:*:*:*:*

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_5:*:*:*:*:*:*

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.5:-:*:*:*:*:*:*

cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.5:update_1:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.0018

Низкий

7.3 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-20

CWE-79

Связанные уязвимости

GHSA-j7cx-qx73-9wxc

CVSS3: 7.3

github

больше 1 года назад

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6

EPSS

Процентиль: 40%

0.0018

Низкий

7.3 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-20

CWE-79