Filtered by vendor Netiq Subscriptions
Total 72 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-38758 1 Netiq 1 Imanager 2024-11-21 7.2 High
Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious scripts on the user's browser. This issue affects: Micro Focus NetIQ iManager NetIQ iManager versions prior to 3.2.6 on ALL.
CVE-2022-26329 1 Netiq 1 Identity Manager 2024-11-21 1.8 Low
File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL.
CVE-2020-11843 1 Netiq 1 Access Manager 2024-11-21 6.5 Medium
This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before
CVE-2019-11648 1 Netiq 1 Self Service Password Reset 2024-11-21 N/A
An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information.
CVE-2018-7678 1 Netiq 1 Access Manager 2024-11-21 N/A
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4.
CVE-2018-7677 1 Netiq 1 Access Manager 2024-11-21 N/A
A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component.
CVE-2018-7676 1 Netiq 1 Identity Manager 2024-11-21 N/A
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information.
CVE-2018-7674 1 Netiq 1 Identity Manager 2024-11-21 N/A
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection.
CVE-2018-7673 1 Netiq 1 Identity Manager 2024-11-21 N/A
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack.
CVE-2018-1350 1 Netiq 1 Identity Manager 2024-11-21 N/A
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration.
CVE-2018-1349 1 Netiq 1 Identity Manager 2024-11-21 N/A
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration.
CVE-2018-1348 1 Netiq 1 Identity Manager 2024-11-21 N/A
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack.
CVE-2018-1347 1 Netiq 1 Imanager 2024-11-21 N/A
The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting.
CVE-2018-1346 1 Netiq 1 Edirectory 2024-11-21 N/A
Addresses denial of service attack to eDirectory versions prior to 9.1.
CVE-2018-1345 1 Netiq 1 Imanager 2024-11-21 N/A
NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack.
CVE-2018-1344 1 Netiq 1 Imanager 2024-11-21 N/A
Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1
CVE-2018-1343 1 Netiq 1 Privileged Account Manager 2024-11-21 N/A
PAM exposure enabling unauthenticated access to remote host
CVE-2018-1342 1 Netiq 1 Access Manager 2024-11-21 N/A
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.
CVE-2018-12462 1 Netiq 1 Imanager 2024-11-21 N/A
NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities.
CVE-2018-12461 1 Netiq 1 Edirectory 2024-11-21 N/A
Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation.