Lucene search
HistoryMay 15, 2024 - 5:15 p.m.
CVE-2024-3486
vulnerability
information disclosure
remote code execution
opentext imanager 3.2.6.0200
xml external entity injection
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
7.4 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution.
CNA Affected
[
{
"defaultStatus": "affected",
"platforms": [
"Windows",
"Linux"
],
"product": "iManager",
"vendor": "OpenText",
"versions": [
{
"lessThanOrEqual": "3.2.6.0300",
"status": "affected",
"version": "3.0.0",
"versionType": "rpm, exe"
}
]
}
]Related
nvd
nvd
CVE-2024-3486
2024-05-15 17:15:13
cvelist
cvelist
CVE-2024-3486 XML External Entity injection vulnerability in iManager
2024-05-15 16:46:03
vulnrichment
vulnrichment
CVE-2024-3486 XML External Entity injection vulnerability in iManager
2024-05-15 16:46:03
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
7.4 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2024-3486