CVE-2005-0288: The change password functionality in Bottomline Webseries Payment Application does not require the old pass...

Security readout for executives and security teams

This issue affects the password-change workflow in Bottomline Webseries Payment Application. Sources say it did not require the existing password when setting a new one, which could let a logged-in user change another user's password. In a payment application, that creates serious account-takeover risk if the product is deployed. Likely exposure is limited to organizations running Bottomline Webseries Payment Application. The bundle does not identify affected versions or platforms, so teams must confirm product presence and version details from internal inventory and vendor records. Prioritize assessment if this application supports payment operations or remains reachable by many users. The flaw can undermine account control, but urgency is reduced where the product is absent, isolated, or no longer in service. Mitigation focus: Check Bottomline or vendor guidance for affected versions and fixes.; Restrict application access to trusted users and networks.; Review and disable unnecessary or stale user accounts..

Prepared

Jun 30, 2026, 01:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.