CVE-2017-14800 Vulnerability Details

  /     /     /  

CVE-2017-14800 Metadata Quick Info

CVE Published: 01/03/2018 | CVE Updated: 16/09/2024 | CVE Year: 2017
Source: microfocus | Vendor: NetIQ | Product: Access Manager
Status : PUBLISHED

---

CVE-2017-14800 Description

A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: reflected cross site scripting attack
Source: NetIQ

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).