5.4
Medium
CVE-2017-14802 Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to…
Description
Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Access Manager 4.3 | 4.3 → < 4.3.3 | 4.3.3 |
Other CVEs of Access Manager
The 6 CVEs of Access Manager →
CVE-2017-14801
Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page…
4.6
Medium
CVE-2017-7419
A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks…
4.6
Medium
CVE-2017-9276
Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be…
5.4
Medium
CVE-2017-14799
A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be…
4.6
Medium