Security Advisory

CVE-2017-5191

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-24 18:00:00

Last updated 2024-08-05 14:55:35

Assigner microfocus

CVSS score not scored

State PUBLISHED

Description

An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer header.

← Browse all CVEs View on cve.org ↗