CVE-2018-12462 NetIQ iManager XSS vulnerabilities

NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities...

CVE-2018-12462

CVE-2018-12462 concerns the NetIQ iManager 3.1.1 product, described in connected sources as addressing potential XSS vulnerabilities . The documents confirm the affected software and the vulnerability category but do not provide detailed root cause analysis, affected components, specific versions...

NetIQ iManager Cross-Site Scripting Vulnerability (CNVD-2018-07544)

NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A cross-site scripting vulnerability exists in the management web interface in NetIQ iManager versions prior to 3.1. A remote attacker can exploit this...

NetIQ iManager Communication Downgrade Attack Vulnerability

NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A security vulnerability exists in NetIQ iManager versions prior to 3.1. An attacker can exploit this vulnerability to perform a degradation attack...

NetIQ iManager Elevation of Privilege Vulnerability

NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A security vulnerability exists in versions of NetIQ iManager prior to 3.1. No detailed vulnerability details are provided at this time...

CVE-2018-1344

Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1...

Privilege escalation

NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack...

Cross site scripting

The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting...

CVE-2018-1345

NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack...

CVE-2018-1347

The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting...

CVE-2018-1344

Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1...

CVE-2018-1345

NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack...

Code injection

Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1...

CVE-2018-1345

NetIQ iManager is affected for versions prior to 3.1, where under some circumstances an elevation of privilege is possible. The issue is documented across multiple sources (NVD/CNVD) with the core description that older iManager releases could allow a user to obtain higher privileges. The exact r...

CVE-2018-1344

CVE-2018-1344 affects NetIQ iManager prior to version 3.1. The issue enables a communication downgrade attack against iManager, with the NVD entry noting an 8.6 (HIGH) CVSS3 impact (network attack, no authentication required, integrity HIGH, confidentiality NONE, availability NONE). The CNVD entr...

CVE-2018-1347 NetIQ iManager, versions prior to 3.1, reflected XSS issue

The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting...

CVE-2018-1347

NetIQ iManager admin web interface (versions prior to 3.1) is affected by a reflected cross-site scripting (XSS) vulnerability. The issue arises in the administrative web interface and reflects attacker-supplied input in the response, enabling potential script execution. The provided data cites C...

CVE-2018-1345 iManager elevation of privilege

NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack...

CVE-2018-1344 NetIQ iManager Communication Downgrade Attack

Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1...

Multiple Cross-Site Scripting Vulnerabilities in Micro Focus Identity Manager and iManager Identity Manager Plug-in

Micro Focus Identity Manager is a suite of identity management solutions from Micro Focus UK. The solution provides the basis for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization. iManager is one of the WEB-based application. Y...