CVE-2018-17950

CVE-2018-17950: Affects NetIQ eDirectory prior to version 9.1 SP2. The issue is an authorization check error where checks are not enforced correctly, enabling potential integrity impact (I = HIGH) without credentials over a network (attack vector: NETWORK, complexity: LOW). The NVD metrics descri...

CVE-2018-17952

CVE-2018-17952 is a cross-site scripting vulnerability in Micro Focus NetIQ eDirectory versions prior to 9.1 SP2. The NVD entry lists a CVSS‑3 base score of 6.1 (MEDIUM) with network attack, low complexity, no privileges required, but user interaction required, and low impacts to confidentiality ...

CVE-2018-17952

Cross site scripting vulnerability in eDirectory prior to 9.1 SP2...

CVE-2018-17950

Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2...

Micro Focus NetIQ eDirectory Information Disclosure Vulnerability

Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. An...

Micro Focus NetIQ eDirectory Open Redirect Vulnerability

Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. An ope...

CVE-2018-7692

Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1...

CVE-2018-7692

Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1...

CVE-2018-7686

Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage...

Open redirect

Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1...

CVE-2018-7686

Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage...

Information disclosure

Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage...

CVE-2018-7686

NetIQ eDirectory prior to 9.1.1 HF1 is affected by an information disclosure vulnerability caused by shared memory usage. Exploitation could allow an attacker to obtain partial/confidential information via network access. The CVSS data indicates a network-based attack with high impact on confiden...

CVE-2018-7692

Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1...

CVE-2018-7686

Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage...

CVE-2018-7692

CVE-2018-7692 is an unvalidated redirect vulnerability in Micro Focus NetIQ eDirectory prior to 9.1.1 HF1. The connected SUSE/CNVD entries confirm an open redirect issue in eDirectory versions before 9.1.1 HF1, caused by insufficient validation of redirect targets. Impact details in the sources i...

CVE-2018-12461

Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation...

CVE-2018-12461

Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation...

Design/Logic Flaw

Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation...

CVE-2018-12461

CVE-2018-12461 affects NetIQ eDirectory prior to version 9.1.1 and concerns the certificate revocation check. The issue is described as a check failure in revocation processing; the fixed state implies upgrade to 9.1.1 or later as the mitigation. CVSS data present (v3 base score 7.5; HIGH) but th...