CVE-2019-11648: Netiq Self Service Password Reset

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information.

Affected products

• Netiq Self Service Password Reset: before 4.4 (fixed in 4.4)

Published 2019-06-24. Last modified 2026-06-17.