EUVD-2016-2693

Malware in sbrugna...

EUVD-2016-2698

Malware in sbrugna...

CVE-2016-1603

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...

CVE-2016-1603

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...

Information disclosure

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...

CVE-2016-1603

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...

CVE-2016-1603

NetIQ IDM ServiceNow Driver before version 1.0.0.1 exposes cryptographic attributes to logged-in users, enabling information disclosure. The vulnerability is documented in CVE-2016-1603 and described across multiple sources (NVD entry and CNVD entry), indicating an information leak in that driver...

CVE-2016-1603: Exposure of Sensitive Information to an Unauthorized Actor

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...

PT-2017-7976

Name of the Vulnerable Software and Affected Versions NetIQ IDM ServiceNow Driver version prior to 1.0.0.1 Description The issue is related to an information leak that could expose cryptographic attributes to logged-in users. Recommendations For versions prior to 1.0.0.1, update to version 1.0.0....

CVE-2016-1598

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages...

Code injection

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages...

PT-2016-4881

Name of the Vulnerable Software and Affected Versions NetIQ IDM 4.5 Identity Applications versions prior to 4.5.4 Description The issue allows attackers to inject arbitrary HTML code into the Role Assignment administrator HTML pages by changing their username. Recommendations For versions prior t...

CVE-2016-1598: Improper Neutralization of Input During Web Page Generation

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages...