Vulnerability Details CVE-2017-9276
Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the "a" parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.9%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 4.3
References
Products affected by CVE-2017-9276
-
cpe:2.3:a:netiq:access_manager:4.0
-
cpe:2.3:a:netiq:access_manager:4.0.1
-
cpe:2.3:a:netiq:access_manager:4.1
-
cpe:2.3:a:netiq:access_manager:4.2
-
cpe:2.3:a:netiq:access_manager:4.3