Search Results (24 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2017-14802 1 Netiq 1 Access Manager 2024-11-21 N/A
Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites.
CVE-2017-14801 1 Netiq 1 Access Manager 2024-11-21 N/A
Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter.
CVE-2017-14800 1 Netiq 1 Access Manager 2024-11-21 N/A
A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users.
CVE-2017-14799 1 Netiq 1 Access Manager 2024-11-21 N/A
A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page.