Description (CNA)
A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks due to unescaped "description" field that could be specified by the provider.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NetIQ / Access Manager | affected 4.3 before 4.3.2; affected 4.2 before 4.2.4 |
CWE
CWE-79
References
- https://bugzilla.suse.com/show_bug.cgi?id=1031853
- https://www.novell.com/support/kb/doc.php?id=7019893
ADP enrichment
No English description supplied.