Vulnerability Details CVE-2017-5191
An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the HTTP Referer header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 54.7%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2017-5191
-
cpe:2.3:a:netiq:access_manager:4.2
-
cpe:2.3:a:netiq:access_manager:4.3