1015 matches found
Cross site scripting
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...
CVE-2018-7677
A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...
CVE-2018-7677
A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...
CVE-2018-7678
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...
CVE-2018-7678
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...
CVE-2018-7678 XSS vulnerability in NetIQ Access Manager (NAM) Admin Console component
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...
CVE-2018-7677 CSRF in NetIQ Access Manager (NAM) Identity Server component
A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...
CVE-2018-7678
CVE-2018-7678 is a cross-site scripting vulnerability in the Administration Console of NetIQ Access Manager (NAM) affecting NAM versions 4.3 and 4.4. The issue stems from improper input filtering in the Administration Console, enabling a remote attacker to execute arbitrary browser code. Supporte...
CVE-2018-7677
The CVE-2018-7677 entry applies to NetIQ Access Manager (NAM) 4.4 Identity Server component. The vulnerability arises because HTTP requests are not properly validated, creating a cross-site request forgery (CSRF) exposure. This allows an attacker to perform unauthorized operations against the aff...
CVE-2018-7677: Cross-Site Request Forgery (CSRF)
A CSRF exposure exists in NetIQ Access Manager NAM 4.4 Identity Server component...
CVE-2018-7678: Improper Neutralization of Input During Web Page Generation
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager NAM 4.3 and 4.4...
NetIQ Sentinel Information Disclosure Vulnerability (CNVD-2018-06631)
NetIQ Sentinel is a security information and event management SIEM solution from US-based NetIQ. The solution collects, stores and analyzes log data and reports on it, as well as analyzing security event data in real time. A security vulnerability exists in NetIQ Sentinel versions prior to 8.1.x...
Design/Logic Flaw
In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If...
CVE-2018-7675
In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If...
CVE-2018-7675
NetIQ Sentinel prior to 8.1.x suffers a session timeout/authentication issue: when a user idle-logs and another user logs in, the new session may be granted but the previous screen and related events/configuration information can be viewed. This indicates an information disclosure risk tied to th...
CVE-2018-7675 Potential Information Disclosure in Sentinel
In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If...
CVE-2018-7675: Exposure of Sensitive Information to an Unauthorized Actor
In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sentinel the user does not log out but does go idle for a period of time. This in turn causes the interface to timeout so that it requires the user to re-authenticate. If...
The vulnerability of the downloadBasicSSOServlet component in the Identity Server of the authentication and access control solution from NetIQ Access Manager allows a perpetrator to execute arbitrary code.
The vulnerability of the downloadBasicSSOServlet component in the Identity Server’s authentication and access control mechanism is related to errors in managing registration data when processing the fileinfo1 parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...