CVE-2017-14799 XSS Vulnerability with ESP URL
MediumCVSS 6.1
EPSS 0.74%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netiq access manager | < 4.3.3 | 4.3.3 |
| netiq access manager | >= 4.3, < 4.3.3 | 4.3.3 |