739 matches found
CVE-2016-9166
NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication security...
eDirectory - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Admin auth bypass, SQLi and File Disclosure Google Dork: no defacers please ! Date: March 2019 reported to vendor without response :D Exploit Author: Efren Diaz Author contact: https://twitter.com/elefr3n Vendor Homepage:...
eDirectory SQL Injection / File Disclosure
Exploit Title: Admin auth bypass, SQLi and File Disclosure Google Dork: no defacers please ! Date: March 2019 reported to vendor without response :D Exploit Author: Efren Diaz Author contact: https://twitter.com/elefr3n Vendor Homepage: https://www.edirectory.com/ Software Link: not available...
eDirectory - SQL Injection
eDirectory - SQL Injection Exploit Title: Admin auth bypass, SQLi and File Disclosure Google Dork: no defacers please ! Date: March 2019 reported to vendor without response :D Exploit Author: Efren Diaz Author contact: https://twitter.com/elefr3n Vendor Homepage: https://www.edirectory.com/...
eDirectory - SQL Injection
Exploit Title: Admin auth bypass, SQLi and File Disclosure Google Dork: no defacers please ! Date: March 2019 reported to vendor without response :D Exploit Author: Efren Diaz Author contact: https://twitter.com/elefr3n Vendor Homepage: https://www.edirectory.com/ Software Link: not available...
Micro Focus NetIQ eDirectory Cross-Site Scripting Vulnerability
Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A...
Micro Focus NetIQ eDirectory Authorization Check Error Vulnerability
Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. An...
CVE-2018-17952
Cross site scripting vulnerability in eDirectory prior to 9.1 SP2...
Cross site scripting
Cross site scripting vulnerability in eDirectory prior to 9.1 SP2...
CVE-2018-17950
Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2...
CVE-2018-17950
Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2...
CVE-2018-17952
Cross site scripting vulnerability in eDirectory prior to 9.1 SP2...
Authorization
Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2...
CVE-2018-17952
CVE-2018-17952 is a cross-site scripting vulnerability in Micro Focus NetIQ eDirectory versions prior to 9.1 SP2. The NVD entry lists a CVSS‑3 base score of 6.1 (MEDIUM) with network attack, low complexity, no privileges required, but user interaction required, and low impacts to confidentiality ...
CVE-2018-17950
CVE-2018-17950: Affects NetIQ eDirectory prior to version 9.1 SP2. The issue is an authorization check error where checks are not enforced correctly, enabling potential integrity impact (I = HIGH) without credentials over a network (attack vector: NETWORK, complexity: LOW). The NVD metrics descri...
CVE-2018-17950
Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2...
CVE-2018-17952
Cross site scripting vulnerability in eDirectory prior to 9.1 SP2...
Micro Focus NetIQ eDirectory Information Disclosure Vulnerability
Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. An...
Micro Focus NetIQ eDirectory Open Redirect Vulnerability
Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. An ope...