CVE-2017-14800: Netiq Access Manager

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter of the policy editor could allowed code injection into pages of authenticated users.

Affected products

• Netiq Access Manager: before 4.3.3 (fixed in 4.3.3)

Published 2018-03-01. Last modified 2026-06-17.