Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: NetIQ Component: Privileged Account Manager Clear all filters
TI-2017-05089 CVE-2017-7437 · GHSA-36hh-v57m-3mm5

Cross site scripting attacks against NetIQ Privileged Account Manager

Priority LOW 29

NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via the "type" and "account" parameters of json requests.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00749 Published 2018-03-05 Fixed in 3.1 Patch Update 3 CWE-79
TI-2017-05090 CVE-2017-7438 · GHSA-q4cr-wchq-x2c6

DOM cross site scripting attack against NetIQ Privileged Account Manager

Priority LOW 28

NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via javascript DOM modification using the supplied cookie parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00612 Published 2018-03-02 Fixed in 3.1 Patch Update 3 CWE-79