CVE-2017-14799 Vulnerability Details

  /     /     /  

CVE-2017-14799 Metadata Quick Info

CVE Published: 01/03/2018 | CVE Updated: 16/09/2024 | CVE Year: 2017
Source: microfocus | Vendor: NetIQ | Product: Access Manager
Status : PUBLISHED

---

CVE-2017-14799 Description

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: cross site scripting attack in the login parameter handling due to incorrect quoting
Source: NetIQ

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).