CVE-2019-11647

MEDIUM 6.1CVE-2019-11647 · Published 24/06/2019 · updated 17/06/2026

In short

CVE-2019-11647 is a MEDIUM (CVSS 6.1) vulnerability affecting netiq self service password reset (microfocus).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.0% of all vulnerabilities.
Fix: update to 4.4 or later.

Package	Affected versions	Patched versions
netiq self service password reset microfocus	`< 4.4`	`4.4`

Description

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack.

References

netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p2/data/release-notes-sspr-44-p2.html

More vulnerabilities in netiq self service password reset

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free