Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: NetIQ Access Manager 4.3.3 Clear all filters
TI-2017-10839 CVE-2017-14800 · GHSA-6fg4-8ph6-v8p9

Reflected xss on Access Manager iManager UI

Priority LOW 29

A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00742 Published 2018-03-01 Fixed in 4.3.3 CWE-79
TI-2017-10838 CVE-2017-14799 · GHSA-x8gr-74fh-m5mm

XSS Vulnerability with ESP URL

Priority LOW 29

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00742 Published 2018-03-01 Fixed in 4.3.3 CWE-79