Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2017-14799

XSS Vulnerability with ESP URL

Description

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetIQ Access Manager

  • 4.3 to < 4.3.3affected

References