Skip to content
OpenAdvisories
Medium · 4.6 CVE-2017-14801 EUVD-2017-6290GHSA-xfmh-2rvq-33v5

Reflected xss in Admin Console REST interface

Published Mar 2, 2018 · Updated Sep 17, 2024 · Assigned by microfocus

Description

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter.

Affected products

VendorProductAffectedFixed
NetIQ Access Manager 4.3 – < 4.3.3 4.3.3

References