title: NetIQ Identity Reporting XSS exposure
description: NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack.
problem types: XSS Issue
affected:
{
product: Identity Reporting
vendor: NetIQ
versions:
lessThan: 5.5 Service Pack 1, status: affected, version: Prior to 5.5 Service Pack 1, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 2.8
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
version: 3.0
]