CVE-2017-5184

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information account enumeration...

CVE-2017-5184

NetIQ Sentinel Server 8.0 prior to 8.0.1 is affected by CVE-2017-5184, which may allow information disclosure (account enumeration) over the network. The OpenVAS entry corroborates leakage of information and notes a remediation path of upgrading to Sentinel 8.0.1. As per the NVD entry, the base i...

CVE-2017-5185

CVE-2017-5185 affects NetIQ Sentinel Server 8.0 prior to 8.0.1. Multiple sources describe a remote denial of service vulnerability in Sentinel Server that can be exploited over the network. The incident is documented across NVD, CNVD, and related vulnerability feeds, all indicating the same versi...

CVE-2017-5185

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service...

Novell eDirectory Multiple Vulnerabilities (Mar 2017)

Novell / NetIQ eDirectory is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netiq:edirectory"...

NetIQ Access Manager Information Disclosure Vulnerability (CNVD-2017-04919)

NetIQ Access Manager NAM is a resource access control solution from NetIQ, USA. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users. An information disclosure vulnerability exists in the NetIQ Access Manager '.htaccess' file. An...

NetIQ Access Manager Access Authentication Credentials Vulnerability

NetIQ Access Manager NAM is a set of resource access control solutions from NetIQ Corporation. The solution provides multiple authentication, data encryption, single sign-on, and SSL VPN for local and remote users. iManager Admin Console is one of the back-end management consoles. A security...

NetIQ Access Manager Cross-Site Scripting Vulnerability (CNVD-2017-04960)

NetIQ Access Manager NAM is a resource access control solution from NetIQ, USA. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users. A cross-site scripting vulnerability exists in NetIQ Access Manager NAM. A remote attacker can...

NetIQ Access Manager Clickjacking Vulnerability

NetIQ Access Manager NAM is a resource access control solution from NetIQ, USA. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users. A clickjacking vulnerability exists in NetIQ Access Manager. A remote attacker could exploit this...

NetIQ IDM ServiceNow Driver Information Disclosure Vulnerability

NetIQ IDM is a suite of user authentication management software from NetIQ, Inc. ServiceNow Driver is one of the software programs that provides cloud-based services and supports users to manage users through Web services. An information disclosure vulnerability exists in NetIQ IDM ServiceNow...

NetIQ Access Manager Remote Code Execution Vulnerability

NetIQ Access Manager provides a simple, secure, and scalable solution to handle all your Web access needs. A remote code execution vulnerability exists in NetIQ Access Manager. The vulnerability is caused due to the iManager Certificate Server Management module allowing administrators to create...

NetIQ Access Manager Information Disclosure Vulnerability

NetIQ Access Manager provides a simple, secure, and scalable solution to handle all your Web access needs. An information disclosure vulnerability exists in NetIQ Access Manager. The vulnerability is caused due to ineffective filtering of incoming XML requests when parsed by the NAM Identity...

NetIQ Access Manager Information Disclosure Vulnerability (CNVD-2017-04728)

NetIQ Access Manager provides a simple, secure, and scalable solution to handle all your Web access needs. NetIQ Access Manager Information Disclosure Vulnerability. Since Access Manager 4.1 and 4.2 support risk-based authentication on the Identity Server. An attacker can obtain local file...

NetIQ Access Manager Information Disclosure Vulnerability

NetIQ Access Manager provides a simple, secure, and scalable solution to handle all Web access needs. The SAML2 implementation of the Identity Server in NetIQ Access Manager fails to properly handle unsigned SAML requests, allowing an attacker to disclose the results to a potentially malicious...

NetIQ Access Manager Cross-Site Request Forgery Vulnerability

NetIQ Access Manager NAM is a set of resource access solution developed by NetIQ Inc. in the United States. It provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users. A cross-site request forgery vulnerability exists in NetIQ Access Manager due to...

CVE-2016-5750

The certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to upload JSP pages that would be executed as the iManager user, allowing code execution by logged-in remote users...

CVE-2016-5756

Multiple components of the web tools in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 were vulnerable to Reflected Cross Site Scripting attacks which could be used to hijack user sessions: nps/servlet/frameservice, nps/servlet/webacc, roma/admin/cntl,...

Design/Logic Flaw

NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to clickjacking attacks due to a missing SAMEORIGIN filter in the "high encryption" setting...

CVE-2016-1603

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...

CVE-2016-5749

NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity resolution enabled, which could lead to local file disclosure via an XML External Entity XXE attack...