CVE-2017-14800

Reflected xss on Access Manager iManager UI

Medium · published March 1, 2018

CVSS v3.0
5.4
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00742 · 54.1th percentile
Published
2018-03-01T19:00Z
EPSS history
Timeline
  • 01 MAR 19:00Z
    Reflected xss on Access Manager iManager UI
    cvelistv5