MEDIUM🇵🇱 Wersja polska

CVE-2021-38122

CVSS 6.2v3.1pub. 2024-08-28upd. 2024-09-13

A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This issue affects NetIQ Advance Authentication before 6.3.5.1

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N

  • Microfocus Netiq Advanced Authentication

    APP
    Microfocus
    6.3< 6.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2023-24468CRITICAL9.8ten sam produkt

Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2

CVE-2021-22509HIGH8.1ten sam produkt

A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead t...

CVE-2021-22530HIGH8.2ten sam produkt

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute for...

CVE-2021-38121HIGH8.3ten sam produkt

Insufficient or weak TLS protocol version identified in Advance authentication client server communication whe...

CVE-2021-22529MEDIUM6.3ten sam produkt

A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue...