CVE-2017-7437

NetIQ Privileged Account Manager (versions prior to 3.1 Patch Update 3) is vulnerable to cross-site scripting via the type and account fields in JSON requests. The issue is caused by insufficient input sanitization in these parameters, allowing an attacker to inject arbitrary web script/HTML. Pub...

CVE-2018-1343

CVE-2018-1343 is described across multiple sources as a PAM exposure vulnerability in Micro Focus Privileged Account Manager (PAM). The CNVD entry states PAM versions 3.1 and 3.2 are affected and that an attacker could exploit the issue to gain access to a remote host. The SUSE security page corr...

CVE-2017-7438

NetIQ Privileged Account Manager is affected up to version 3.1 Patch Update 3. The vulnerability allows cross-site scripting by altering the JavaScript DOM via the cookie parameter, enabling injected scripts in authenticated sessions. Affected component/behavior is DOM manipulation leading to XSS...