Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
5.7AI Score
0.002EPSS
dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.
6.3AI Score
0.004EPSS
Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors.
6.7AI Score
0.003EPSS
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.
7.1AI Score
0.959EPSS
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.
8.8CVSS
8.7AI Score
0.002EPSS
NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services.
9.8CVSS
9.3AI Score
0.003EPSS
7.5CVSS
7.5AI Score
0.001EPSS
6.1CVSS
6AI Score
0.001EPSS
Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.
7.5CVSS
7.4AI Score
0.007EPSS
6.1CVSS
6.2AI Score
0.001EPSS
PossibleImproper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered inOpenText™ eDirectory 9.2.3.0000.
6.1CVSS
5.6AI Score
0.0005EPSS
Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered inOpenText™eDirectory before 9.2.4.0000.
7.6CVSS
7.6AI Score
0.0005EPSS
Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered inOpenText™ eDirectory 9.2.4.0000.
9.1CVSS
6.6AI Score
0.001EPSS
Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered inOpenText™ eDirectory 9.2.5.0000.
6.1CVSS
5.4AI Score
0.0005EPSS
PossibleExternal Service Interaction attack in eDirectory has been discovered inOpenText™ eDirectory. This impact all version before 9.2.6.0000.
9.8CVSS
5.4AI Score
0.001EPSS
PossibleExternal Service Interaction attack in eDirectory has been discovered inOpenText™ eDirectory. This impact all version before 9.2.6.0000.
7.4CVSS
7.5AI Score
0.001EPSS