CVE-2017-14799

CVSS 4.6 - MEDIUM

Description

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page.

Affected Products

Vendor	Product	Version
netiq	access_manager	`All versions`

References

https://www.novell.com/support/kb/doc.php?id=70223...

Weakness Types

CWE-79

CVE Information

CVE ID:: CVE-2017-14799
Published:: 2018-03-01
Modified:: 2024-11-21
CVSS Score:: 4.6
Severity:: MEDIUM
Vector:: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Affected Vendors

netiq

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL