Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: NetIQ Access Manager 4.3.3 Clear all filters
TI-2017-10840 CVE-2017-14801 · GHSA-xfmh-2rvq-33v5

Reflected xss in Admin Console REST interface

Priority LOW 29

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00742 Published 2018-03-02 Fixed in 4.3.3 CWE-79
TI-2017-06717 CVE-2017-9276 · GHSA-77p6-g8qp-84c3

XSS Vulnerability in iManager

Priority LOW 29

Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the "a" parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00778 Published 2018-03-02 Fixed in 4.3.3 CWE-79