CVE-2018-7677

LOW

NetIQ Access Manager 4.4 - Cross-Site Request Forgery in Identity Server

Title source: llm

A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component.

Core 2

Core References

Various Sources x_refsource_confirm

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

CVSS v3 3.5

EPSS 0.0053

EPSS Percentile 41.0%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE

CWE-352

Status published

Products (1)

netiq/access_manager 4.4

Published Mar 14, 2018

Tracked Since Feb 18, 2026