CVE-2017-5191

An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer…

published April 24, 2017

CVSS
—
EPSS
1%
Percentile
51.5
In the wild
Unconfirmed
What it is

An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00679 · 51.5th percentile
Published
2017-04-24T18:00Z
EPSS history
Timeline
  • 24 APR 18:00Z
    An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer…
    cvelistv5