3026 matches found
CVE-2018-1443
An XML parsing vulnerability affects IBM SAML-based single sign-on SSO systems IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2. This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a differe...
CVE-2017-6152
A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password...
CVE-2017-6152
A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password...
CVE-2017-6152
A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password...
Micro Focus Novell Access Manager Admin Console and IDP Server Open Redirect Vulnerability
Micro Focus Novell Access Manager is a comprehensive Web access management solution from Micro Focus, U.K. Admin Console is one of the management consoles, and IDP servers are one of the IDP servers. A security vulnerability exists in the Micro Focus Novell Access Manager Admin Console and IDP...
The vulnerability of the downloadBasicSSOServlet component in the Identity Server of the authentication and access control solution from NetIQ Access Manager allows a perpetrator to execute arbitrary code.
The vulnerability of the downloadBasicSSOServlet component in the Identity Server’s authentication and access control mechanism is related to errors in managing registration data when processing the fileinfo1 parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
NetIQ Access Manager Cross-Site Scripting Vulnerability (CNVD-2018-04989)
Micro Focus NetIQ Access Manager is a resource access control solution from Micro Focus UK. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users.OAuth application is one of the OAuth authorization applications. A cross-site scriptin...
Micro Focus NetIQ Access Manager Cross-Site Scripting Vulnerability
Micro Focus NetIQ Access Manager is a resource access control solution from Micro Focus UK. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users. A cross-site scripting vulnerability exists in the handling of ESP login parameters in...
NetIQ Access Manager Reflective Cross-Site Scripting Vulnerability (CNVD-2018-06558)
Micro Focus NetIQ Access Manager is a resource access control solution from Micro Focus UK. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users. A cross-site scripting vulnerability exists in Micro Focus NetIQ Access Manager versio...
Cross site scripting
A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks due to unescaped "description" field that could be specified by the provider...
Cross site scripting
Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the "a" parameter...
CVE-2017-14802
Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites...
Code injection
Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites...
CVE-2017-7419
A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks due to unescaped "description" field that could be specified by the provider...
CVE-2017-14801
Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...
Cross site scripting
Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...
CVE-2017-7419
A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks due to unescaped "description" field that could be specified by the provider...
CVE-2017-14802
Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites...