Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2020-25837

EPSS 0.32% · P55
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-25837

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Micro Focus Self Service Password Reset 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Micro Focus Self Service Password Reset是英国Micro Focus公司的一套基于Web的密码管理解决方案。该产品支持用户使用自助服务更改密码。 Micro Focus自助服务密码重置(SSPR)产品中的敏感信息泄露漏洞。该漏洞影响版本4.4.0.0至4.4.0.6以及4.5.0.1和4.5.0.2。在某些配置中,漏洞可能泄露敏感信息。 Micro Focus Self Service Password Reset (SSPR) 多版本存在信息泄露漏洞,该漏洞会导致该
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-Micro Focus Self Service Password Reset (SSPR) 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2 -

II. Public POCs for CVE-2020-25837

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-25837

登录查看更多情报信息。

Same Patch Batch · n/a · 2020-11-05 · 40 CVEs total

CVE-2020-77637.5 HIGHArbitrary File Read
CVE-2020-77626.5 MEDIUMArbitrary File Read
CVE-2020-77615.3 MEDIUMRegular Expression Denial of Service (ReDoS)
CVE-2020-13661Telerik Fiddler 安全漏洞
CVE-2020-6877ZTE ZXA10 eODN 信息泄露漏洞
CVE-2020-8267Ubiquiti Networks UniFi Cloud Key 授权问题漏洞
CVE-2020-5793Tenable Network Security Nessus 安全漏洞
CVE-2020-5939F5 BIG-IP 安全漏洞
CVE-2020-5942F5 BIG-IP 安全漏洞
CVE-2020-5941F5 BIG-IP 安全漏洞
CVE-2020-5940F5 BIG-IP 跨站脚本漏洞
CVE-2020-5945F5 BIG-IP 跨站脚本漏洞
CVE-2020-5943F5 BIG-IP 加密问题漏洞
CVE-2020-5944F5 BIG-IQ 安全漏洞
CVE-2020-5946F5 BIG-IP 安全漏洞
CVE-2020-6015Check Point Endpoint Security 后置链接漏洞
CVE-2020-13536Moxa MXView 授权问题漏洞
CVE-2020-13537Moxa MXView 授权问题漏洞
CVE-2020-7207HPE Proliant Gen10 with Intel Innovation Engine 安全漏洞
CVE-2020-17510Apache Shiro 授权问题漏洞

Showing top 20 of 40 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2020-25837

No comments yet


Leave a comment