Skip to content

CVE-2017-14801 Reflected xss in Admin Console REST interface

MediumCVSS 6.1 EPSS 0.74%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter.

Affected products

ProductAffected versionsFixed in
netiq access manager < 4.3.3 4.3.3
netiq access manager >= 4.3, < 4.3.3 4.3.3

References