CyberRota Analysis
AI analysis pending.
CVE
CVE-2016-5749
Severity
MEDIUM
CVSS
5.5
EPSS
0.39%
Original NVD Description
NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity (XXE) attack.
Related CVEs
Other vulnerabilities affecting the same vendor(s)