CVE-2024-3968

OpenText iManager 3.2.6.0200 is affected by CVE-2024-3968, a Remote Code Execution vulnerability that can be triggered via a custom file upload task. The vulnerability is documented with high-severity scores (NVD CVSSv3.1: 9.8/CRITICAL; Community security note with 7.8/HIGH) and indicates an atta...

CVE-2024-3970 Server-Side Request Forgery vulnerability in iManager

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory traversal...

CVE-2024-3970

OpenText iManager 3.2.6.0200 is affected by a Server-Side Request Forgery vulnerability that could lead to sensitive information disclosure via directory traversal. The CVE-2024-3970 entry notes an exploitable condition with impact on confidentiality and requires no user interaction (CVSS v3.1: b...

CVE-2024-3970 Server-Side Request Forgery vulnerability in iManager

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory traversal...

PT-2024-26231 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A Path Traversal issue has been found in OpenText iManager, which can lead to privilege escalation or file disclosure. Recommendations: For OpenText iManager version 3.2.6.0200, at the moment,...

PT-2024-28609 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A remote code execution issue has been discovered, which can trigger remote code execution using unsafe Java object deserialization. Recommendations: For OpenText iManager version 3.2.6.0200, ...

PT-2024-26236 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A Broken Authentication issue has been discovered, allowing an attacker to manipulate certain parameters to bypass authentication. Recommendations: For OpenText iManager version 3.2.6.0200, at...

PT-2024-28619

Name of the Vulnerable Software and Affected Versions OpenText iManager version 3.2.6.0200 Description A remote code execution issue has been discovered, allowing for the execution of remote code through a custom file upload task. Recommendations For OpenText iManager version 3.2.6.0200, consider...

PT-2024-26237 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: The issue is related to a File Upload vulnerability in an unauthenticated session, which could allow an attacker to upload a file without authentication. Recommendations: For OpenText iManager...

PT-2024-26227 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A Remote Code Execution issue has been discovered, which can trigger command injection and insecure deserialization issues. Recommendations: For OpenText iManager version 3.2.6.0200, at the...

PT-2024-28638 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A Server Side Request Forgery vulnerability has been discovered, which could lead to sensitive information disclosure by directory traversal. Recommendations: For OpenText iManager version...

PT-2024-26235 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: The issue is related to an XML External Entity injection, which could lead to information disclosure and remote code execution. Recommendations: For OpenText iManager version 3.2.6.0200, at th...