Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2509▼ 448 respecto a la semana anterior
Críticas / altas1286▼ 7 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 464 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.3) | 0.34% | — | Opentext Self Service Password ResetAI | 29/8/2025 | 17/6/2026 | Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Authentication Bypass.This issue affects Self Service Password Reset from before 4.8 patch 3. | |
| Analizada | Media (6.1) | 0.32% | — | Microfocus Netiq Self Service Password Reset | 21/8/2024 | 17/6/2026 | Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6 | |
| Modificada | Alta (7.5) | 1.1% | — | Microfocus Self Service Password Reset | 5/11/2020 | 17/6/2026 | Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information. | |
| Modificada | Media (5.9) | 0.40% | — | Microfocus Netiq Self Service Password Reset | 22/10/2019 | 17/6/2026 | Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack. | |
| Modificada | Crítica (9.8) | 2.1% | — | Microfocus Netiq Self Service Password Reset | 14/8/2019 | 17/6/2026 | A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate. | |
| Modificada | Alta (7.5) | 1.1% | — | Netiq Self Service Password Reset | 24/6/2019 | 17/6/2026 | An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information. | |
| Modificada | Media (6.1) | 0.65% | — | Microfocus Netiq Self Service Password Reset | 24/6/2019 | 17/6/2026 | A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack. | |
| Modificada | Media (6.1) | 1.4% | — | Microfocus Self Service Password Reset | 24/3/2016 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. | |
| Modificada | Media (6.2) | 0.77% | — | Oracle Passlogix V-go Self-service Password Reset AND OEM | 7/2/2011 | 16/6/2026 | Passlogix v-GO Self-Service Password Reset (SSPR) and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save As" dialog that is… |