Skip to content
OpenAdvisories
Unscored CVE-2016-1592 EUVD-2016-2687GHSA-hvjf-hmjv-m5w5

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.…

Published Oct 27, 2016 · Updated Aug 5, 2024 · Assigned by microfocus

Description

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI.

Affected products

VendorProductAffectedFixed
— NetIQ Designer for Identity Manager before 4.5.3 NetIQ Designer for Identity Manager before 4.5.3 —

References