Unscored CVE-2021-22531 EUVD-2021-9673GHSA-6v5p-35px-x3cv

A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability.…

Published May 12, 2022 · Updated Aug 3, 2024 · Assigned by microfocus

Description

A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0

Affected products

Vendor	Product	Affected	Fixed
—	NetIQ Access Manager	4.5, 5.0	—

References

https://www.microfocus.com/documentation/access-manager/5.0/accessmanager502-release-notes/accessmanager502-release-notes.html