CVE-2017-14803

Critical · 9.8

CVSS

9.8

EPSS

34.6%

Published

Jan 20, 2018

CISA due date

—

The record

In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE11 where an attacker can execute arbitrary code on the system.

Affected packages

Ecosystem	Package	Introduced	Fixed