CVE-2017-7430

moderate-risk

Published 2017-05-03

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework.

Do I need to act?

0.66% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.1/10 Medium

NETWORK / LOW complexity

Imanager

Novell Netiq

https://bugzilla.novell.com/show_bug.cgi?id=1024959

https://bugzilla.novell.com/show_bug.cgi?id=1030691

https://dl.netiq.com/Download?buildid=24FxpmqdThE~

https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~

https://www.netiq.com/support/kb/doc.php?id=7016795

https://www.novell.com/support/kb/doc.php?id=7010166

https://bugzilla.novell.com/show_bug.cgi?id=1024959

https://bugzilla.novell.com/show_bug.cgi?id=1030691

https://dl.netiq.com/Download?buildid=24FxpmqdThE~

https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~

https://www.netiq.com/support/kb/doc.php?id=7016795

https://www.novell.com/support/kb/doc.php?id=7010166

/ 100

moderate-risk

Severity 23/34 · High

Exploitability 2/34 · Minimal

Exposure 22/34 · High