| Package | Affected versions | Patched versions |
|---|---|---|
| access manager | ≥ 4.2, < 4.2.4≥ 4.3, < 4.3.2 | 4.2.44.3.2 |
A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks due to unescaped "description" field that could be specified by the provider.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free