High severity · published Aug 29, 2025
CVE-2025-5808
Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset
7.3
CVSS
0.3%
EPSS
No
On KEV
Description
Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Authentication Bypass.This issue affects Self Service Password Reset from before 4.8 patch 3.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Self Service Password Reset · OpenText
4.8 through < · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-5808
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-5808
docs.microfocus.com
https://docs.microfocus.com/doc/28/4.8/scrtyimpr
More from Self Service Password Reset
6.1
CVE-2020-11850
Cross site scripting vulnerability in Self Service Password Reset