Lucene search
+L

1015 matches found

CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•20 views

NetIQ iManager 代码问题漏洞

NetIQ iManager is an advanced web-based management console from NetIQ UK. Provides customized, secure access to network management utilities and content from any location in the world. A security vulnerability exists in NetIQ iManager version 3.2.6.0200, which stems from the presence of remote co...

9.8CVSS8AI score0.00635EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•15 views

NetIQ iManager 安全漏洞

NetIQ iManager is an advanced web-based management console from NetIQ UK. Customized, secure access to network management utilities and content can be provided from any location in the world. A security vulnerability exists in NetIQ iManager version 3.2.6.0200, which stems from the presence of a...

7.5CVSS6.5AI score0.00257EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•14 views

NetIQ iManager 代码问题漏洞

NetIQ iManager is an advanced web-based management console from NetIQ UK. Provides customized, secure access to network management utilities and content from any location in the world. A security vulnerability exists in NetIQ iManager version 3.2.6.0200 that stems from the presence of a file uplo...

9.8CVSS6.8AI score0.0037EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/07 1:11 p.m.•42 views

CVE-2023-7240 Broken Access Control leading to SSRF in NetIQ Identity Console

An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server Server IP/DNS field and is triggering connection to arbitrary address...

5.8CVSS6AI score0.00376EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/07 1:11 p.m.•17 views

CVE-2023-7240 Broken Access Control leading to SSRF in NetIQ Identity Console

An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server Server IP/DNS field and is triggering connection to arbitrary address...

5.8CVSS7.1AI score0.00376EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/07 12:00 a.m.•13 views

NetIQ Identity Console 安全漏洞

NetIQ Identity Console is an identity management platform from NetIQ, Inc. A security vulnerability exists in NetIQ Identity Console versions prior to 1.7 Service Pack 2 that stems from the detection of an incorrect authorization level in the login panel, which could lead to unauthenticated...

5.8CVSS6.8AI score0.00376EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/13 10:15 p.m.•34 views

CVE-2020-11862

Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flooding.This issue affects NetIQ Privileged Account Manager: before 3.7.0.2...

8.6CVSS8.7AI score0.007EPSS
SaveExploits0References1
Prion
Prion
•added 2024/03/13 10:15 p.m.•31 views

Code injection

Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flooding.This issue affects NetIQ Privileged Account Manager: before 3.7.0.2...

5CVSS7.2AI score0.007EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/13 9:32 p.m.•17 views

CVE-2020-11862 Insecure renegotiation in SSL protocol caused Denial of service attack in Privileged Account Manager

Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flooding.This issue affects NetIQ Privileged Account Manager: before 3.7.0.2...

8.6CVSS7AI score0.007EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/13 9:32 p.m.•59 views

CVE-2020-11862

CVE-2020-11862 is an allocation of resources without limits or throttling affecting OpenText NetIQ Privileged Account Manager prior to version 3.7.0.2. The vulnerability arises from unrestricted resource allocation in the PAM app, enabling a potential denial of service via resource exhaustion. Af...

8.6CVSS8.7AI score0.007EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/13 9:32 p.m.•41 views

CVE-2020-11862 Insecure renegotiation in SSL protocol caused Denial of service attack in Privileged Account Manager

Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flooding.This issue affects NetIQ Privileged Account Manager: before 3.7.0.2...

8.6CVSS8.6AI score0.007EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/13 12:00 a.m.•3 views

CVE-2020-11862: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flooding.This issue affects NetIQ Privileged Account Manager: before 3.7.0.2...

8.6CVSS5.8AI score0.007EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/13 12:00 a.m.•15 views

OpenText NetIQ Privileged Account Manager Security Vulnerability

OpenText NetIQ Privileged Account Manager is a customer management software from OpenText Canada. A security vulnerability exists in OpenText NetIQ Privileged Account Manager prior to version 3.7.0.2, which arises from an unrestricted allocation of resources in the application...

8.6CVSS6.7AI score0.007EPSS
SaveExploits0References2
OSV
OSV
•added 2024/02/29 1:43 a.m.•15 views

CVE-2024-1470

Authorization Bypass Through User-Controlled Key vulnerability in NetIQ OpenText Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6...

7.8CVSS5.8AI score0.0019EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/29 1:43 a.m.•27 views

CVE-2024-1470

Authorization Bypass Through User-Controlled Key vulnerability in NetIQ OpenText Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6...

7.8CVSS7AI score0.0019EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/29 1:43 a.m.•49 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in NetIQ OpenText Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6...

3.3CVSS7.6AI score0.0019EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/29 12:00 a.m.•18 views

Micro Focus NetIQ Client Login Extension Security Vulnerability

Micro Focus NetIQ Client Login Extension is a client login extension from Micro Focus UK. A security vulnerability exists in Micro Focus NetIQ Client Login Extension version 4.6, which originates from an authorized bypass of the user control key, allowing privilege escalation, code injection...

7.8CVSS7.2AI score0.0019EPSS
SaveExploits0References2
CVE
CVE
•added 2024/02/20 4:10 p.m.•68 views

CVE-2024-1470

CVE-2024-1470 pertains to NetIQ (OpenText) Client Login Extension on Windows, version 4.6, with an "Authorization Bypass Through User-Controlled Key" that leads to privilege escalation and code injection. Multiple connected sources corroborate the affected product/version and the underlying issue...

7.8CVSS7AI score0.0019EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/02/20 4:10 p.m.•42 views

CVE-2024-1470 Elevation of Privilege attack on NetIQ Client login extension

Authorization Bypass Through User-Controlled Key vulnerability in NetIQ OpenText Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6...

7.1CVSS7.3AI score0.0019EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/20 4:10 p.m.•19 views

CVE-2024-1470 Elevation of Privilege attack on NetIQ Client login extension

Authorization Bypass Through User-Controlled Key vulnerability in NetIQ OpenText Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6...

7.1CVSS7.1AI score0.0019EPSS
SaveExploits0References1
Rows per page
Query Builder