CVE-2016-1599
24.03.2016, 01:59
Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
| Vendor | Product | Version |
|---|---|---|
| microfocus | self_service_password_reset | 2.0 |
| microfocus | self_service_password_reset | 3.0 |
| microfocus | self_service_password_reset | 3.1 |
| microfocus | self_service_password_reset | 3.2 |
| microfocus | self_service_password_reset | 3.3 |
| microfocus | self_service_password_reset | 3.3.1 |
𝑥
= Vulnerable software versions