CVE-2018-12480: NetIQ Access Manager XSS vulnerability in versions prior to 4.4 SP3

Published Nov 15, 2018

Updated

Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3.

Affected Software

8 affected components

MicroFocus Access Manager=4.1

MicroFocus Access Manager=4.1-sp1

MicroFocus Access Manager=4.1-sp2

MicroFocus Access Manager=4.2

MicroFocus Access Manager=4.3

MicroFocus Access Manager=4.4

MicroFocus Access Manager=4.4-sp1

MicroFocus Access Manager=4.4-sp2

Remediation

Information

Upgrade to NetIQ Access Manager versions prior to 4.4 SP3.

Event History

Nov 15, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

RemedyDescriptionWeakness

Frequently Asked Questions

What is CVE-2018-12480?

CVE-2018-12480 is an XSS vulnerability in NetIQ Access Manager versions prior to 4.4 SP3.

How severe is CVE-2018-12480?

CVE-2018-12480 has a severity rating of 6.1 (medium).

Which software versions are affected by CVE-2018-12480?

Versions 4.1, 4.1-sp1, 4.1-sp2, 4.2, 4.3, 4.4, 4.4-sp1, and 4.4-sp2 of Microfocus Access Manager are affected by CVE-2018-12480.

How can I mitigate CVE-2018-12480?

To mitigate CVE-2018-12480, update to NetIQ Access Manager version 4.4 SP3 or later.

Where can I find more information about CVE-2018-12480?

You can find more information about CVE-2018-12480 in the following references: - [Microfocus Knowledge Base](https://support.microfocus.com/kb/doc.php?id=7023513) - [NetIQ Access Manager Release Notes](https://www.netiq.com/documentation/access-manager-44/accessmanager443-release-notes/data/accessmanager443-release-notes.html#b149i4n6)