CVE-2020-11850

NVD Published Date: August 21, 2024 at 01:15 PM

NVD Last Modified: August 23, 2024 at 05:02 PM

Download Patch

Vulnerability ID

CVE-2020-11850

Severity

MEDIUM

Severity Score

6.1

Summary

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6

References

https://www.netiq.com/documentation/self-service-password-reset-45/sspr-4502-release-notes/data/sspr-4502-release-notes.html#b149gz5h

Mitigation and Patches

Exploits

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE ID

CWE-79

Recent Publish

Security Update for Microsoft ODBC Driver 18 for SQL Server (KB5037571)

Security Update for Microsoft OLE DB Driver for SQL Server (KB5037572)

Security Update for Microsoft OLE DB Driver 19 for SQL Server (KB5037573)

Surface Tools for IT

Surface Tools for IT.

Update For Exchange Server 2019 CU14 (KB5037224)

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2020-11850

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2020-11850

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action