CVE-2017-14800: Reflected xss on Access Manager iManager UI
Published Mar 1, 2018
·Updated
A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users.
Affected Software
1 affected component
NetIQ Access Manager<4.3.3
Event History
Mar 1, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-14800?
CVE-2017-14800 is classified as a medium severity vulnerability due to its ability to perform reflected cross-site scripting attacks.
2
How do I fix CVE-2017-14800?
To fix CVE-2017-14800, upgrade NetIQ Access Manager to version 4.3.3 or later.
3
Who is affected by CVE-2017-14800?
CVE-2017-14800 affects all versions of NetIQ Access Manager prior to 4.3.3.
4
What type of attack does CVE-2017-14800 facilitate?
CVE-2017-14800 facilitates reflected cross-site scripting attacks through the "typecontainerid" parameter.
5
Can CVE-2017-14800 affect authenticated users?
Yes, CVE-2017-14800 could allow code injection into pages viewed by authenticated users.