CVE-2024-4554

Опубликовано: 28 авг. 2024

Источник: nvd

CVSS3: 7.3

CVSS3: 5.4

EPSS Низкий

Описание

Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects Access Manager before 5.0.4.1 and 5.1.

Ссылки

https://www.microfocus.com/documentation/access-manager/5.0/accessmanager504-p1-release-notes/accessmanager504-p1-release-notes.html
Release Notes
https://www.microfocus.com/documentation/access-manager/5.1/accessmanager51-release-notes/accessmanager51-release-notes.html
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microfocus:netiq_access_manager:*:*:*:*:*:*:*:*

Версия до 5.0.4.1 (исключая)

EPSS

Процентиль: 59%

0.00381

Низкий

7.3 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-cxj4-mqwg-88f8

CVSS3: 7.3

github

больше 1 года назад

Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects NetIQ Access Manager before 5.0.4.1 and 5.1.

EPSS

Процентиль: 59%

0.00381

Низкий

7.3 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79