VYPR
Medium severity6.5NVD Advisory· Published Mar 23, 2017· Updated May 13, 2026

CVE-2016-5755

CVE-2016-5755

Description

NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to clickjacking attacks due to a missing SAMEORIGIN filter in the "high encryption" setting.

Affected products

5
  • cpe:2.3:a:netiq:access_manager:4.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:netiq:access_manager:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:netiq:access_manager:4.2:sp1:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.