NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1.
[
{
"product": "NetIQ Identity Manager",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "All versions in the 4.8 line prior to version 4.8 Service Pack 2 HotFix 1"
}
]
}
]