Skip to content

Known vulnerabilities in NetIQ Access Manager

Is your version affected?

CVE Summary Score Published
CVE-2017-9276 Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be… 5.4 Medium Mar 2, 2018
CVE-2017-7419 A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks… 4.6 Medium Mar 2, 2018
CVE-2017-14802 Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to… 5.4 Medium Mar 2, 2018
CVE-2017-14801 Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page… 4.6 Medium Mar 2, 2018
CVE-2017-14800 A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter… 5.4 Medium Mar 1, 2018
CVE-2017-14799 A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be… 4.6 Medium Mar 1, 2018

Other NetIQ products