Cross site scripting

2018-03-0220:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.6%

JSON

NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via javascript DOM modification using the supplied cookie parameter.

CPENameOperatorVersion
privileged_account_managereq3.1 hotfix2
privileged_account_managereq3.1 hotfix1
privileged_account_managerle3.1

Name	Operator	Version
privileged_account_manager	eq	3.1 hotfix2
privileged_account_manager	eq	3.1 hotfix1
privileged_account_manager	le	3.1

References

bugzilla.suse.com/show_bug.cgi?id=1001355

www.netiq.com/documentation/privileged-account-manager-3/npam3103-release-notes/data/npam3103-release-notes.html

0.001 Low

EPSS

Percentile

36.6%

JSON

Related for PRION:CVE-2017-7438