EDB-35594

PoC

NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor SEC Consultpublished 2014-12-23catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-9412US	medium4.3	3.24% (88th)	Exploit	2014-12-23
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary…
CVE-2014-5216US	medium4.3	3.24% (88th)	Exploit	2014-12-23
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote attackers to inject arbitrary web script or HTML via (1) the loc…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.