CVE-2017-7438: Netiq Privileged Account Manager

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via javascript DOM modification using the supplied cookie parameter.

Affected products

• Netiq Privileged Account Manager: up to and including 3.1; version 3.1 only

Published 2018-03-02. Last modified 2026-06-17.