CVE-2021-22515

Multi-Factor Authentication MFA functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1...

NetIQ Advanced Authentication 授权问题漏洞

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a move away from usernames and passwords to a more secure way to protect your sensitive information. A security vulnerability previously existed in Advanced Authentication version 6.3 SP4, which stemmed from an improper...

CVE-2020-25839

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

CVE-2020-25839

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

Design/Logic Flaw

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

CVE-2020-25839

CVE-2020-25839 affects NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1, with an injection vulnerability fixed in 4.8 SP2 HF1. Affected component/details are limited to the vendor’s patch note; no exploitation specifics or in-the-wild exploit status are provided in the connected documents....

CVE-2020-25839

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

CVE-2020-25839: Improper Neutralization of Special Elements used in an SQL Command

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

Micro Focus NetIQ Identity Manager SQL Injection Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. A security vulnerability exists in...

Security Bulletin: Apache Commons FileUpload (Publicly disclosed vulnerability) in IBM eDiscovery Manager

Summary Apache Commons FileUpload, as used in Novell NetIQ Sentinel and other products, could allow a remote attacker to execute arbitrary code on the system, caused by deserialization of untrusted data in DiskFileItem class of the FileUpload library. A remote attacker could exploit this...

Unspecified Vulnerability in Micro Focus NetIQ Advanced Authentication Framework

Micro Focus NetIQ Advanced Authentication Framework is a two-factor authentication framework from Micro Focus UK. An unspecified vulnerability exists in Micro Focus NetIQ Advanced Authentication Framework versions prior to 6.0. An attacker could exploit this vulnerability to conduct a...

CVE-2019-11650

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

CVE-2019-11650

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

Authentication flaw

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

CVE-2019-11650

CVE-2019-11650 concerns NetIQ Advanced Authentication Framework. The affected product is NetIQ Advanced Authentication Framework, with MITM vulnerability reported in versions prior to 6.0. The root cause and specifics beyond the affected version range aren’t detailed in the provided documents. Th...

CVE-2019-11650

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

CVE-2019-11650: Undefined Security Weakness

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

Micro Focus NetIQ Self Service Password Reset Information Disclosure Vulnerability

Micro Focus NetIQ Self Service Password Reset is a web-based password management solution. An information disclosure vulnerability exists in Micro Focus NetIQ Self Service Password Reset versions prior to 4.4, which can be exploited by attackers to obtain sensitive information...

Micro Focus NetIQ Self Service Password Reset Cross-Site Scripting Vulnerability

Micro Focus NetIQ Self Service Password Reset is a web-based password management solution. A cross-site scripting vulnerability exists in Micro Focus NetIQ Self Service Password Reset versions prior to 4.4, which can be exploited by attackers to conduct cross-site scripting attacks...

CVE-2019-11648

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information...