Filtered by vendor Netiq
Subscriptions
Total
72 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2022-38758 | 1 Netiq | 1 Imanager | 2024-11-21 | 7.2 High |
Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious scripts on the user's browser. This issue affects: Micro Focus NetIQ iManager NetIQ iManager versions prior to 3.2.6 on ALL. | ||||
CVE-2022-26329 | 1 Netiq | 1 Identity Manager | 2024-11-21 | 1.8 Low |
File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL. | ||||
CVE-2020-11843 | 1 Netiq | 1 Access Manager | 2024-11-21 | 6.5 Medium |
This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before | ||||
CVE-2019-11648 | 1 Netiq | 1 Self Service Password Reset | 2024-11-21 | N/A |
An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information. | ||||
CVE-2018-7678 | 1 Netiq | 1 Access Manager | 2024-11-21 | N/A |
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4. | ||||
CVE-2018-7677 | 1 Netiq | 1 Access Manager | 2024-11-21 | N/A |
A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component. | ||||
CVE-2018-7676 | 1 Netiq | 1 Identity Manager | 2024-11-21 | N/A |
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information. | ||||
CVE-2018-7674 | 1 Netiq | 1 Identity Manager | 2024-11-21 | N/A |
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection. | ||||
CVE-2018-7673 | 1 Netiq | 1 Identity Manager | 2024-11-21 | N/A |
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack. | ||||
CVE-2018-1350 | 1 Netiq | 1 Identity Manager | 2024-11-21 | N/A |
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration. | ||||
CVE-2018-1349 | 1 Netiq | 1 Identity Manager | 2024-11-21 | N/A |
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration. | ||||
CVE-2018-1348 | 1 Netiq | 1 Identity Manager | 2024-11-21 | N/A |
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack. | ||||
CVE-2018-1347 | 1 Netiq | 1 Imanager | 2024-11-21 | N/A |
The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting. | ||||
CVE-2018-1346 | 1 Netiq | 1 Edirectory | 2024-11-21 | N/A |
Addresses denial of service attack to eDirectory versions prior to 9.1. | ||||
CVE-2018-1345 | 1 Netiq | 1 Imanager | 2024-11-21 | N/A |
NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack. | ||||
CVE-2018-1344 | 1 Netiq | 1 Imanager | 2024-11-21 | N/A |
Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1 | ||||
CVE-2018-1343 | 1 Netiq | 1 Privileged Account Manager | 2024-11-21 | N/A |
PAM exposure enabling unauthenticated access to remote host | ||||
CVE-2018-1342 | 1 Netiq | 1 Access Manager | 2024-11-21 | N/A |
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console. | ||||
CVE-2018-12462 | 1 Netiq | 1 Imanager | 2024-11-21 | N/A |
NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities. | ||||
CVE-2018-12461 | 1 Netiq | 1 Edirectory | 2024-11-21 | N/A |
Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation. |