900 matches found
CVE-2018-1345
NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack...
Code injection
Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1...
CVE-2018-1347 NetIQ iManager, versions prior to 3.1, reflected XSS issue
The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting...
CVE-2018-1345
NetIQ iManager is affected for versions prior to 3.1, where under some circumstances an elevation of privilege is possible. The issue is documented across multiple sources (NVD/CNVD) with the core description that older iManager releases could allow a user to obtain higher privileges. The exact r...
CVE-2018-1344
CVE-2018-1344 affects NetIQ iManager prior to version 3.1. The issue enables a communication downgrade attack against iManager, with the NVD entry noting an 8.6 (HIGH) CVSS3 impact (network attack, no authentication required, integrity HIGH, confidentiality NONE, availability NONE). The CNVD entr...
CVE-2018-1346 NetIQ eDirectory Denial of Service
Addresses denial of service attack to eDirectory versions prior to 9.1...
CVE-2018-1347
NetIQ iManager admin web interface (versions prior to 3.1) is affected by a reflected cross-site scripting (XSS) vulnerability. The issue arises in the administrative web interface and reflects attacker-supplied input in the response, enabling potential script execution. The provided data cites C...
CVE-2018-1344 NetIQ iManager Communication Downgrade Attack
Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1...
CVE-2018-1345 iManager elevation of privilege
NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack...
Micro Focus NetIQ Identity Manager JDBC Driver Information Disclosure Vulnerability
Micro Focus NetIQ Identity Manager is an identity management solution from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization.JDBC driver is one of the database connection...
Micro Focus NetIQ Identity Manager Code Execution Vulnerability
Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus in the United Kingdom. The solution provides the foundation for account provisioning, user self-service, authorization, and Web services, and supports data sharing and synchronization.NetIQ Identity...
NetIQ iManager Authentication Vulnerability
NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A security vulnerability exists in NetIQ iManager versions prior to 3.0.3 that originates when the program sends an SSL private key from a Java application to...
Cross site scripting
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...
Cross site request forgery (csrf)
A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...
CVE-2018-7677
A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...
CVE-2018-7677
A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...
CVE-2018-7678
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...
CVE-2018-7678
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...