« Volver al listado

CVE-2020-11850

Estado: AnalizadaMedia (6.1)—

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Netiq Self Service Password Reset

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-11850",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2020-11850",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-08-21T13:23:10.987824Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@opentext.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7.3,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.8,
        "exploitabilityScore": 1
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "OpenText",
          "product": "Self Service Password Reset",
          "versions": [
            {
              "status": "affected",
              "version": "4.5.0.2",
              "lessThan": "<",
              "versionType": "server"
            }
          ],
          "platforms": [
            "Linux"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:opentext:self_service_password_reset:*:*:*:*:*:*:*:*"
          ],
          "vendor": "opentext",
          "product": "self_service_password_reset",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "4.5.0.2",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "0",
              "lessThan": "4.4.0.6",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-08-21T13:15:04.027",
  "references": [
    {
      "url": "https://www.netiq.com/documentation/self-service-password-reset-45/sspr-4502-release-notes/data/sspr-4502-release-notes.html#b149gz5h",
      "tags": [
        "Release Notes"
      ],
      "source": "security@opentext.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@opentext.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6"
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de validación de entrada incorrecta en OpenText Self Service Password Reset permite cross-site scripting (XSS). Este problema afecta al autoservicio de restablecimiento de contraseña antes de 4.5.0.2 y 4.4.0.6"
    }
  ],
  "lastModified": "2026-06-17T02:50:54.693",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_self_service_password_reset:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E701C6EC-B62F-41BB-B5AA-CE334DFBD47F",
              "versionEndExcluding": "4.4"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D2267AA-38A3-4AAC-9CAE-8EBC4FE19A30"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26CCCD03-813E-4423-8703-81C55839A52E"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B7B135B-352A-48CC-B92D-1C5D4725C032"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E6830EE-5BE7-4B31-AAE4-A6EB8B6BA708"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B3B7924-247B-4904-8AD2-11ED4AC93BD0"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "412BB939-68DD-42E4-9489-3147E86D089B"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.5:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "29E8E907-EDC5-4C1B-82A8-9F6003DDC215"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.5:update_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F8A8A2E-7EC0-4E8A-A4E9-F2ED985E229E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}