exploitDog

CVE-2014-9412

Опубликовано: 23 дек. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter to roma/jsp/debug/debug.jsp or (2) an arbitrary parameter in a debug.DumpAll action to nps/servlet/webacc, a different issue than CVE-2014-5216.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microfocus:access_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:access_manager:4.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08478

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-m7gh-7492-6ppq

github

больше 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter to roma/jsp/debug/debug.jsp or (2) an arbitrary parameter in a debug.DumpAll action to nps/servlet/webacc, a different issue than CVE-2014-5216.

EPSS

Процентиль: 92%

0.08478

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79