CVE-2017-14801: Netiq Access Manager

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter.

Affected products

• Netiq Access Manager: before 4.3.3 (fixed in 4.3.3)

Published 2018-03-02. Last modified 2026-06-17.