Lucene search
+L

900 matches found

CVE
CVE
added 2021/09/02 4:56 p.m.45 views

CVE-2021-22525

NetIQ Access Manager CVE-2021-22525 describes an information-leakage vulnerability in NAM prior to version 5.0.1. The root cause is insufficient privilege controls that can disclose sensitive information (confidentiality impact reported as HIGH in CVSS data). Affected product/component: NetIQ Acc...

5.5CVSS5.3AI score0.00241EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/02 4:56 p.m.22 views

CVE-2021-22525

This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1...

5.6AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/09/02 12:0 a.m.7 views

Micro Focus NetIQ Access Manager 信息泄露漏洞

Micro Focus NetIQ Access Manager NAM is a resource access control solution from Micro Focus UK. The solution provides multiple authentication, data encryption, single sign-on, and SSLVPN for local and remote users. An information disclosure vulnerability exists in NetIQ Access Manager, which aris...

5.5CVSS5.8AI score0.00241EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/31 12:0 a.m.4 views

CVE-2021-22526

Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...

6.1CVSS6.3AI score0.00485EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/08/31 12:0 a.m.5 views

CVE-2021-22528

Reflected Cross Site Scripting XSS vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...

8CVSS6AI score0.00582EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/08/31 12:0 a.m.4 views

CVE-2021-22527

Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...

7.5CVSS7.1AI score0.00733EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/08/31 12:0 a.m.6 views

CVE-2021-22524

Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...

5.4CVSS5.9AI score0.00654EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:0 a.m.10 views

The vulnerability of the SAML-based authentication and access control implementation in NetIQ Access Manager allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAML-based authentication and access control implementation of NetIQ Access Manager is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.5CVSS7.7AI score0.25695EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2021/07/15 12:0 a.m.12 views

Unspecified Vulnerability in NetIQ Advanced Authentication

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A security vulnerability exists in NetIQ Advanced Authentication that allows the use of single-factor authentication in...

6.5CVSS6.6AI score0.00685EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/12 11:15 a.m.6 views

CVE-2021-22515

Multi-Factor Authentication MFA functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1...

6.5CVSS6.6AI score0.00685EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/12 11:15 a.m.28 views

CVE-2021-22515

Multi-Factor Authentication MFA functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1...

6.5CVSS0.00685EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/12 10:4 a.m.31 views

CVE-2021-22515 Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server

Multi-Factor Authentication MFA functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1...

4.8CVSS6.8AI score0.00685EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/12 10:4 a.m.58 views

CVE-2021-22515

NetIQ Advanced Authentication MFA can be bypassed, allowing single-factor authentication in versions prior to 6.3 SP4 Patch 1. The vulnerability affects the MFA flow and could enable unauthorized access when MFA is expected. Public advisories reference NetIQ’s release of updates in 6.3 SP4 Patch ...

6.5CVSS5.8AI score0.00685EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/07/12 12:0 a.m.8 views

NetIQ Advanced Authentication 安全漏洞

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A security vulnerability exists in NetIQ Advanced Authentication that allows the use of single-factor authentication in...

6.5CVSS5.5AI score0.00685EPSS
SaveExploits0References2
NCSC
NCSC
added 2021/07/12 12:0 a.m.8 views

Vulnerability fixed in NetIQ Advanced Authentication

Micro Focus has fixed a vulnerability in NetIQ Advanced Authentication. The vulnerability allows a malicious party to bypass bypass multi-factor authentication. No substantive details about this vulnerability made publicly available. Micro Focus has released updates to fix the vulnerability fix i...

6.5CVSS6.9AI score0.00685EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/04/29 4:40 p.m.5 views

CVE-2021-22515

Multi-Factor Authentication MFA functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1...

6.5CVSS6.6AI score0.00685EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/12 12:0 a.m.8 views

NetIQ Advanced Authentication 授权问题漏洞

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a move away from usernames and passwords to a more secure way to protect your sensitive information. A security vulnerability previously existed in Advanced Authentication version 6.3 SP4, which stemmed from an improper...

7.2CVSS7.1AI score0.00761EPSS
SaveExploits0References2
NVD
NVD
added 2020/11/20 4:15 p.m.25 views

CVE-2020-25839

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

9.8CVSS9.4AI score0.01176EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/20 4:15 p.m.7 views

CVE-2020-25839

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

9.8CVSS7.3AI score0.01176EPSS
SaveExploits0References1
Prion
Prion
added 2020/11/20 4:15 p.m.26 views

Design/Logic Flaw

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

7.5CVSS9.3AI score0.01176EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder