Upstream information

CVE-2017-7419 at MITRE

Description

A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks due to unescaped "description" field that could be specified by the provider.

SUSE information

Overall state of this security issue: Does not affect SUSE products

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

  • TID7019893, published Sa 3. Mär 12:02:14 CET 2018

SUSE Timeline for this CVE

CVE page created: Sat Mar 3 02:33:58 2018
CVE page last modified: Tue Jul 1 12:31:52 2025