VULNERABILITY INTELLIGENCE
CVE-2017-14802
CVSS score5.4 MEDIUM
EPSS probability1.00%
CISA KEVNot currently listed
Published2018-03-02
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Description
Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites.
Weakness classification
- CWE-601: URL Redirection to Untrusted Site ('Open Redirect')