CVE-2017-14801: Reflected xss in Admin Console REST interface
Published Mar 2, 2018
·Updated
Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter.
Affected Software
1 affected component
NetIQ Access Manager<4.3.3
Event History
Mar 2, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-14801?
CVE-2017-14801 is considered a medium severity vulnerability due to its reflected XSS impact.
2
How do I fix CVE-2017-14801?
To fix CVE-2017-14801, upgrade your NetIQ Access Manager to version 4.3.3 or later.
3
What type of vulnerability is CVE-2017-14801?
CVE-2017-14801 is a reflected cross-site scripting (XSS) vulnerability.
4
Who is affected by CVE-2017-14801?
The vulnerability affects NetIQ Access Manager versions prior to 4.3.3.
5
What can attackers do with CVE-2017-14801?
Attackers can exploit CVE-2017-14801 to inject and execute malicious scripts in the context of the user's browser.