Lucene search

OpenTextVULNRICHMENT:CVE-2024-4554

HistoryAug 28, 2024 - 6:27 a.m.

CVE-2024-4554 Multiple xss vulnerability in NetIQ Access Manager

2024-08-2806:27:31

CWE-20

OpenText

github.com

cve-2024-4554

multiple xss

netiq access manager

improper input validation

cross-site scripting

opentext.

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

AI Score

Confidence

High

EPSS

Percentile

14.7%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects NetIQ Access Manager before 5.0.4.1 and 5.1.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*"
    ],
    "vendor": "netiq",
    "product": "access_manager",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "5.0.4.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "5.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.microfocus.com/documentation/access-manager/5.0/accessmanager504-p1-release-notes/accessmanager504-p1-release-notes.html

www.microfocus.com/documentation/access-manager/5.1/accessmanager51-release-notes/accessmanager51-release-notes.html

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

AI Score

Confidence

High

EPSS

Percentile

14.7%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-4554