CVE-2017-9276
XSS Vulnerability in iManager
- State
- Published
- Severity
- 5.4 Medium
- Published
- Mar 2, 2018
- Updated
- Sep 17, 2024
- Reserved
- May 29, 2017
Description
Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the "a" parameter.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.4 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N | microfocus |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Access ManagerNetIQ |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.