CVE-2021-38122CWE-20

Cross-Site Scripting (XSS) in Advance Authentication

Medium · published August 28, 2024

CVSS v3.1
6.2
EPSS
0%
Percentile
20.2
In the wild
Unconfirmed
What it is

A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information.

This issue affects NetIQ Advance Authentication before 6.3.5.1

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-08-28T06:28Z
EPSS history
Timeline
  • 28 AUG 06:28Z
    Cross-Site Scripting (XSS) in Advance Authentication
    cvelistv5