CVE-2016-5748

—

CVSS 3.0

5.5 medium

EPSS

<1%p28

Published

Mar 23, 2017 (Mar 23, 2017)

Modified

Jun 17, 2026

Description

External Entity Processing (XXE) vulnerability in the "risk score" application of NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to disclose the content of local files to logged-in users.

Vendors: netiq
Products: access manager
Weakness: CWE-611
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.