PT-2017-16370

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions 4.2.2 through 4.3.0 Description The issue is related to a Cross-Site Scripting XSS problem in the AssertionConsumerServiceURL field of a signed AuthnRequest in a samlp:AuthnRequest document, specifically when NetI...

CVE-2017-5183: Improper Neutralization of Input During Web Page Generation

NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when configured as an Identity Server, has XSS in the AssertionConsumerServiceURL field of a signed AuthnRequest in a samlp:AuthnRequest document...