CVE-2025-5808 HIGH

CVE-2025-5808: Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset

Vendor Opentext

Product Self Service Password Reset

Weakness CWE-1284

Published August 29, 2025

Last update August 29, 2025

View on NVD All CVEs

CVSS base score

7.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Authentication Bypass.This issue affects Self Service Password Reset from before 4.8 patch 3.

Key dates

02Disclosure timeline

August 29, 2025 CVE published

August 29, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-5808 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1284.html

Related vulnerabilities

CVE-2025-5808: Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset

01Description

02Disclosure timeline

03References

04Related CVE