CVE-2017-14801 Reflected xss in Admin Console REST interface

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...

CVE-2017-7419: Improper Neutralization of Input During Web Page Generation

A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks due to unescaped "description" field that could be specified by the provider...

PT-2018-8374

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions 4.2 through 4.2.3 NetIQ Access Manager versions 4.3 through 4.3.1 Description The issue allows cross-site scripting attacks due to an unescaped description field that could be specified by the provider...

CVE-2017-14801: Improper Neutralization of Input During Web Page Generation

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...

PT-2018-5722

Name of the Vulnerable Software and Affected Versions: NetIQ Access Manager versions prior to 4.3.3 Description: The issue allows attackers to perform a reflected XSS attack by using the url parameter to reflect back malicious code into the called page. Recommendations: For versions prior to 4.3....

Micro Focus NetIQ Access Manager Reflective Cross-Site Scripting Vulnerability

Micro Focus NetIQ Access Manager is a resource access control solution from Micro Focus UK. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users. A reflected cross-site scripting vulnerability exists in Micro Focus NetIQ Access...

CVE-2017-14799

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page...

Cross site scripting

A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users...

CVE-2017-14800

A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users...

Cross site scripting

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page...

CVE-2017-14799

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page...

CVE-2017-14800

NetIQ Access Manager (pre-4.3.3) is affected by a reflected cross-site scripting vulnerability that can be triggered via the typecontainerid parameter in the policy editor, enabling code injection into pages viewed by authenticated users. The issue arises in the policy editor flow and is document...

CVE-2017-14799 XSS Vulnerability with ESP URL

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page...

CVE-2017-14800 Reflected xss on Access Manager iManager UI

A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users...

CVE-2017-14799

The CVE-2017-14799 entry concerns Micro Focus NetIQ Access Manager prior to version 4.3.3, where the ESP login parameter handling is vulnerable to cross-site scripting. The underlying issue is improper handling of ESP login parameters, allowing an attacker to inject JavaScript into the login page...

CVE-2017-14800: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users...

CVE-2017-14799: Improper Neutralization of Input During Web Page Generation

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page...

PT-2018-5721

Name of the Vulnerable Software and Affected Versions: NetIQ Access Manager versions prior to 4.3.3 Description: A reflected cross-site scripting attack could allow code injection into pages of authenticated users. This issue is related to the use of the typecontainerid parameter in the policy...

PT-2018-5719

Name of the Vulnerable Software and Affected Versions: NetIQ Access Manager versions prior to 4.3.3 Description: A cross-site scripting issue exists in the handling of the ESP login parameter, allowing an attacker to inject JavaScript code into the login page. Recommendations: For versions prior ...

Novell NetIQ Access Manager FwRequest Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell NetIQ Access Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FwRequest class. The issue results from the lack of proper validation ...