Skip to content
OpenAdvisories
Medium · 4.6 CVE-2017-14799 EUVD-2017-6288GHSA-x8gr-74fh-m5mm

XSS Vulnerability with ESP URL

Published Mar 1, 2018 · Updated Sep 16, 2024 · Assigned by microfocus

Description

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page.

Affected products

VendorProductAffectedFixed
NetIQ Access Manager 4.3 – < 4.3.3 4.3.3

References