CVE-2025-5808

Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset

State: Published
Severity: 7.3 High
Published: Aug 29, 2025
Updated: Aug 29, 2025
Reserved: Jun 6, 2025

Description

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Authentication Bypass.This issue affects Self Service Password Reset from before 4.8 patch 3.

Scores

CVSS	Score	Vector	Source
4.0	7.3 High	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N	OpenText

Weaknesses

CWE-1284 Improper Validation of Specified Quantity in Input

Affected Products

Product	Versions
Self Service Password ResetOpenText	4.8 through <Affected

References

https://docs.microfocus.com/doc/28/4.8/scrtyimpr

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.