CVE-2019-11647: Micro Focus Netiq Self Service Password Reset

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack.

Affected products

• Micro Focus Netiq Self Service Password Reset: before 4.4 (fixed in 4.4)

Published 2019-06-24. Last modified 2026-06-17.