Lucene search
OpenTextCVE-2024-4554HistoryAug 28, 2024 - 7:15 a.m.
CVE-2024-4554
2024-08-2807:15:09
CWE-79
CWE-20
OpenText
web.nvd.nist.gov
25
opentext netiq access manager
cross-site scripting
vulnerability
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
EPSS
0
Percentile
14.7%
Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects NetIQ Access Manager before 5.0.4.1 and 5.1.
Affected configurations
Node
microfocusnetiq_access_managerRange<5.0.4.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microfocus | netiq_access_manager | * | cpe:2.3:a:microfocus:netiq_access_manager:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "NetIQ Access Manager",
"vendor": "OpenText",
"versions": [
{
"lessThan": "<",
"status": "affected",
"version": "5.0.4.1",
"versionType": "server"
},
{
"lessThan": "<",
"status": "affected",
"version": "5.1",
"versionType": "server"
}
]
}
]Related
cvelist
cvelist
CVE-2024-4554 Multiple xss vulnerability in NetIQ Access Manager
2024-08-28 06:27:31
vulnrichment
vulnrichment
CVE-2024-4554 Multiple xss vulnerability in NetIQ Access Manager
2024-08-28 06:27:31
nvd
nvd
CVE-2024-4554
2024-08-28 07:15:09
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
EPSS
0
Percentile
14.7%
Related for CVE-2024-4554