CVE-2017-14802 MEDIUM

CVE-2017-14802: Unvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLs

Vendor Netiq

Product Access Manager

Weakness CWE-601 · Open redirect

Published March 2, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

5.4/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites.

Key dates

02Disclosure timeline

March 2, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-14802 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/601.html

Related vulnerabilities

04Related CVE

CVE-2026-21295 Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) CVE-2025-57878 BUG-000174149 - The Portal for ArcGIS has an unvalidated redirect. CVE-2024-53995 GHSL-2024-288: SickChill open redirect in login CVE-2025-67713 Miniflux 2 has an Open Redirect via protocol-relative `redirect_url` CVE-2026-20123 Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability