VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 23, 2017· Updated Jun 17, 2026

CVE-2016-5751

CVE-2016-5751

Description

An unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 could be used to trigger XSS and leak authentication credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Microfocus/Access Manager6 versions
    cpe:2.3:a:netiq:access_manager:4.1:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:netiq:access_manager:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.2:sp1:*:*:*:*:*:*
    • (no CPE)range: <4.1.2 HF1, <4.2.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.