| Package | Affected versions | Patched versions |
|---|---|---|
| access manager | = 4.1= 4.2 |
NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity (XXE) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free