CVE-2005-0288: Bottomline Webseries Payment Application

Low severity, CVSS 3.6. EPSS: 0.7% chance of exploitation in the next 30 days.

The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords.

Affected products

• Bottomline Webseries Payment Application: version 4.0 only

Published 2005-01-11. Last modified 2026-06-16.