CVE-2016-1592

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI...

Code injection

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI...

Design/Logic Flaw

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of the forgotUser.do CGI...

Code injection

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages...

CVE-2015-0787

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of the forgotUser.do CGI...

CVE-2015-0787

NetIQ Designer for Identity Manager is affected by an XSS vulnerability in the forgotUser.do CGI, exploitable via the accessMgrDN parameter. Versions prior to 4.5.3 are impacted; remote attackers could inject arbitrary HTML/Script in a user’s context. Remediation: upgrade to version 4.5.3 or late...

CVE-2016-1598

Affected software: NetIQ Identity Manager IDM 4.5 Identity Applications, prior to version 4.5.4. Vulnerability: Cross-site scripting (XSS) via the username field that allows an attacker to inject arbitrary HTML into the Role Assignment administrator HTML pages. Root cause (as described): the prog...

CVE-2015-0787

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of the forgotUser.do CGI...

CVE-2016-1592

NetIQ Designer for Identity Manager is affected by CVE-2016-1592: an XSS vulnerability in the nrfEntitlementReport.do CGI allows remote attackers to inject arbitrary HTML code in pages rendered for Identity Manager, and affects versions prior to 4.5.3. The connected documents confirm the vulnerab...

CVE-2016-1592

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI...

CVE-2016-1598

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages...

NetIQ Sentinel Arbitrary Code Execution Vulnerability

NetIQ Sentinel is a Security Information and Event Management SIEM solution from NetIQ USA. A security vulnerability exists in NetIQ Sentinel version 7.4x, which can be exploited by an attacker to execute arbitrary code in an affected application...

Novell NetIQ Sentinel CVE-2016-1000031 Remote Code Execution Vulnerability

Description Novell NetIQ Sentinel is prone to a security vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Novell NetIQ Sentinel version 7.4x are vulnerable. Technologies Affected Apache Commons FileUpload 1.0...

Micro Focus NetIQ Sentinel Server SentinelContext Authentication Bypass (CVE-2016-1605)

The vulnerability is due to a flaw in SentinelContext Java class that allows a user to retrieve a valid authentication cookie from the vulnerable server by providing "admin" user name in an HTTP request. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted HTTP...

Micro Focus NetIQ Sentinel Server ReportViewServlet Directory Traversal (CVE-2016-1605)

The vulnerability is due to insufficient validation of fileName parameter within the ReportViewServlet servlet. A remote, authenticated attacker could exploit this vulnerability by sending crafted HTTP requests to the target server. Successful exploitation allows the attacker to read the content ...

NetIQ Access Manager iManager 2.7.7.6 / 2.7.7.5 Cross Site Scripting

Advisory ID: SYSS-2016-067 Product: Access Manager iManager Manufacturer: NetIQ Affected Versions: 2.7.7.5, 2.7.7.6 Tested Versions: 2.7.7.5 Vulnerability Type: Temporary Second Order Cross-Site Scripting CWE-79 Risk Level: Low Solution Status: Fixed Solution Date: 2016-07 Public Disclosure:...

NetIQ Sentinel Server Authentication Bypass and Arbitrary File Download

A vulnerability was discovered in NetIQ Sentinel Server that may allow remote attackers to disclose arbitrary file contents. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

NetIQ Sentinel Directory Traversal Vulnerability

NetIQ Sentinel is a security information and event management SIEM solution from US-based NetIQ. The solution collects, stores and analyzes log data and reports on it, as well as analyzing security event data in real time. A directory traversal vulnerability exists in the ReportViewServlet applet...

CVE-2016-1605

Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a PREVIEW value for the fileType field...

CVE-2016-1605

Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a PREVIEW value for the fileType field...