What’s Vulnerable › Vulnerabilities

CVE-2017-14802: Unvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLs

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-02 · updated 2026-06-17
• Weakness: CWE-601

Description

Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites.

Affected products

• NetIQ Access Manager: through 4.3

References

• https://www.novell.com/support/kb/doc.php?id=7022360
• https://www.novell.com/support/kb/doc.php?id=7022360

Get alerted when CVE-2017-14802 or the next vulnerability affects your stack