CVE-2022-26325
Assigner: microfocus
Published: 2022-05-02T18:41:42
State: PUBLISHED
affected: platforms: All
product: NetIQ Access Manager
vendor: Micro Focus
versions: lessThan: 5.0.2
status: affected
version: NetIQ Access Manager
versionType: custom
descriptions: value: Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 2.9
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L
version: 3.1
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: INTERNAL
title: Cross Site Scripting vulnerability in NetIQ Access Manager versions prior to version 5.0.2
workarounds: value: Install / Upgrade NetIQ Access Manager 5.0.2
x_generator: engine: Vulnogram 0.0.9