CVE-2017-5183

2017-04-2018:00:00

microfocus

www.cve.org

0.001 Low

EPSS

Percentile

38.5%

JSON

NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when configured as an Identity Server, has XSS in the AssertionConsumerServiceURL field of a signed AuthnRequest in a samlp:AuthnRequest document.

CNA Affected

[
  {
    "product": "Identity Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Identity Server"
      }
    ]
  }
]

References

www.novell.com/support/kb/doc.php?id=7018509

0.001 Low

EPSS

Percentile

38.5%

JSON

Related for CVELIST:CVE-2017-5183