CVE-2017-9276: XSS Vulnerability in iManager
Published Mar 2, 2018
·Updated
Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the "a" parameter.
Affected Software
1 affected component
NetIQ Access Manager<4.3.3
Event History
Mar 2, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-9276?
CVE-2017-9276 has a medium severity rating due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2017-9276?
To mitigate CVE-2017-9276, upgrade to NetIQ Access Manager version 4.3.3 or later.
3
What type of vulnerability is CVE-2017-9276?
CVE-2017-9276 is a cross-site scripting (XSS) vulnerability.
4
What software is affected by CVE-2017-9276?
CVE-2017-9276 affects NetIQ Access Manager iManager versions prior to 4.3.3.
5
What can attackers do with CVE-2017-9276?
Attackers can exploit CVE-2017-9276 to inject malicious scripts into web pages viewed by users.