Skip to content

CVE-2017-9276 XSS Vulnerability in iManager

MediumCVSS 6.1 EPSS 0.78%
Published
Updated
Exploit status
No public exploit known

Description

Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the "a" parameter.

Affected products

ProductAffected versionsFixed in
netiq access manager < 4.3.3 4.3.3

References