Lucene search

K
nvd[email protected]NVD:CVE-2024-4554
HistoryAug 28, 2024 - 7:15 a.m.

CVE-2024-4554

2024-08-2807:15:09
CWE-79
web.nvd.nist.gov
10
improper input validation
opentext
netiq access manager
xss attack

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.7%

Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack.Β This issue affects NetIQ Access Manager before 5.0.4.1 and 5.1.

Affected configurations

Nvd
Node
microfocusnetiq_access_managerRange<5.0.4.1
VendorProductVersionCPE
microfocusnetiq_access_manager*cpe:2.3:a:microfocus:netiq_access_manager:*:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.7%

Related for NVD:CVE-2024-4554