1. Home
  2. CVE Database
  3. CVE-2017-9275
LOW · 2.8

CVE-2017-9275

NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack.

Vulnerability Description

NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack.

CVSS Score

2.8

LOW

CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
NetiqIdentity Reporting< 5.5

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2017-9275?

CVE-2017-9275 is a vulnerability with a CVSS score of 2.8 (LOW). NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack.

How severe is CVE-2017-9275?

CVE-2017-9275 has been rated LOW with a CVSS base score of 2.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-9275?

Check the references section above for vendor advisories and patch information. Affected products include: Netiq Identity Reporting.