Lucene search
+L

900 matches found

CVE
CVE
added 2020/11/20 3:24 p.m.83 views

CVE-2020-25839

CVE-2020-25839 affects NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1, with an injection vulnerability fixed in 4.8 SP2 HF1. Affected component/details are limited to the vendor’s patch note; no exploitation specifics or in-the-wild exploit status are provided in the connected documents....

9.8CVSS9.3AI score0.01176EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/20 3:24 p.m.35 views

CVE-2020-25839

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

9.4AI score0.01176EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/11/20 12:0 a.m.9 views

Micro Focus NetIQ Identity Manager SQL Injection Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. A security vulnerability exists in...

9.8CVSS7.3AI score0.01176EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2020/06/19 10:3 p.m.25 views

Security Bulletin: Apache Commons FileUpload (Publicly disclosed vulnerability) in IBM eDiscovery Manager

Summary Apache Commons FileUpload, as used in Novell NetIQ Sentinel and other products, could allow a remote attacker to execute arbitrary code on the system, caused by deserialization of untrusted data in DiskFileItem class of the FileUpload library. A remote attacker could exploit this...

9.8CVSS2.1AI score0.34731EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2019/07/12 12:0 a.m.8 views

Unspecified Vulnerability in Micro Focus NetIQ Advanced Authentication Framework

Micro Focus NetIQ Advanced Authentication Framework is a two-factor authentication framework from Micro Focus UK. An unspecified vulnerability exists in Micro Focus NetIQ Advanced Authentication Framework versions prior to 6.0. An attacker could exploit this vulnerability to conduct a...

5.9CVSS6.9AI score0.00819EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/10 7:15 p.m.5 views

CVE-2019-11650

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

5.9CVSS6.2AI score0.00819EPSS
SaveExploits0References1
NVD
NVD
added 2019/07/10 7:15 p.m.20 views

CVE-2019-11650

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

5.9CVSS5.7AI score0.00819EPSS
SaveExploits0References1
Prion
Prion
added 2019/07/10 7:15 p.m.25 views

Authentication flaw

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

4.3CVSS5.7AI score0.00819EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/07/10 6:2 p.m.133 views

CVE-2019-11650

CVE-2019-11650 concerns NetIQ Advanced Authentication Framework. The affected product is NetIQ Advanced Authentication Framework, with MITM vulnerability reported in versions prior to 6.0. The root cause and specifics beyond the affected version range aren’t detailed in the provided documents. Th...

5.9CVSS5.7AI score0.00819EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/07/10 6:2 p.m.23 views

CVE-2019-11650

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

5.7AI score0.00819EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/06/25 12:0 a.m.5 views

Micro Focus NetIQ Self Service Password Reset Information Disclosure Vulnerability

Micro Focus NetIQ Self Service Password Reset is a web-based password management solution. An information disclosure vulnerability exists in Micro Focus NetIQ Self Service Password Reset versions prior to 4.4, which can be exploited by attackers to obtain sensitive information...

7.5CVSS6.3AI score0.01111EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/06/25 12:0 a.m.7 views

Micro Focus NetIQ Self Service Password Reset Cross-Site Scripting Vulnerability

Micro Focus NetIQ Self Service Password Reset is a web-based password management solution. A cross-site scripting vulnerability exists in Micro Focus NetIQ Self Service Password Reset versions prior to 4.4, which can be exploited by attackers to conduct cross-site scripting attacks...

6.1CVSS6.3AI score0.00647EPSS
SaveExploits0References1
NVD
NVD
added 2019/06/24 4:15 p.m.22 views

CVE-2019-11647

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack...

6.1CVSS6AI score0.00647EPSS
SaveExploits0References1
OSV
OSV
added 2019/06/24 4:15 p.m.8 views

CVE-2019-11647

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack...

6.1CVSS6.3AI score0.00647EPSS
SaveExploits0References1
NVD
NVD
added 2019/06/24 4:15 p.m.20 views

CVE-2019-11648

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information...

7.5CVSS7.3AI score0.01111EPSS
SaveExploits0References1
OSV
OSV
added 2019/06/24 4:15 p.m.4 views

CVE-2019-11648

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information...

7.5CVSS7.1AI score0.01111EPSS
SaveExploits0References1
Prion
Prion
added 2019/06/24 4:15 p.m.23 views

Cross site scripting

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack...

4.3CVSS5.9AI score0.00647EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/06/24 4:15 p.m.19 views

Information disclosure

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information...

5CVSS7.3AI score0.01111EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/06/24 3:40 p.m.58 views

CVE-2019-11648

CVE-2019-11648 concerns information leakage in Micro Focus NetIQ Self Service Password Reset (SSPR). The vulnerability affects all versions prior to 4.4 and can expose sensitive information. In the provided data, the CVSS metrics show a CVSS v3 base score of 7.5 (HIGH) with network attack vector,...

7.5CVSS7.2AI score0.01111EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/06/24 3:40 p.m.24 views

CVE-2019-11648

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information...

7.3AI score0.01111EPSS
SaveExploits0References1
Rows per page
Query Builder