CVE-2018-12480

Published: Nov 15, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3.

Affected (8)

Products: Microfocus: Access Manager

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Microfocus Access Manager	Version 4.1
Microfocus Access Manager	Version 4.1 sp1
Microfocus Access Manager	Version 4.1 sp2
Microfocus Access Manager	Version 4.2
Microfocus Access Manager	Version 4.3
Microfocus Access Manager	Version 4.4
Microfocus Access Manager	Version 4.4 sp1
Microfocus Access Manager	Version 4.4 sp2

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

https://support.microfocus.com/kb/doc.php?id=7023513

Source: security@opentext.com

https://www.netiq.com/documentation/access-manager-44/accessmanager443-release-notes/data/accessmanager443-release-notes.html#b149i4n6

Source: security@opentext.com

https://support.microfocus.com/kb/doc.php?id=7023513

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.netiq.com/documentation/access-manager-44/accessmanager443-release-notes/data/accessmanager443-release-notes.html#b149i4n6

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.