7.5
CVE-2020-25837
- EPSS 0.32%
- Published 05.11.2020 21:15:12
- Last modified 21.11.2024 05:18:52
- Source security@opentext.com
- Teams watchlist Login
- Open Login
Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information.
Data is provided by the National Vulnerability Database (NVD)
Microfocus ≫ Self Service Password Reset Version >= 4.4.0.0 <= 4.4.0.6
Microfocus ≫ Self Service Password Reset Version >= 4.5.0.1 <= 4.5.0.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.32% | 0.516 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|