CVE-2024-3969

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload

CVE-2024-3483

Remote CodeExecution has been discovered inOpenText™ iManager 3.2.6.0200. The vulnerability cantrigger command injection and insecure deserialization issues.

CVE-2024-3968

Remote CodeExecution has been discovered inOpenText™ iManager 3.2.6.0200. The vulnerability cantrigger remote code execution using custom file upload task.

CVE-2024-3488

File Upload vulnerability in unauthenticatedsession found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload afile without authentication.

CVE-2024-3486

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution.

CVE-2024-3487

Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. Thisvulnerability allows an attacker to manipulate certain parameters to bypassauthentication.

CVE-2024-3484

Path Traversal found in OpenText™ iManager 3.2.6.0200. This can lead to privilege escalationor file disclosure.

CVE-2024-3485

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. Thiscould lead to senstive information disclosure.

CVE-2024-3967

Remote CodeExecution has been discovered inOpenText™ iManager 3.2.6.0200. The vulnerability cantrigger remote code execution unisng unsafe java object deserialization.

CVE-2024-3970

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. Thiscould lead to senstive information disclosure by directory traversal.

CVE-2024-4429

Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. Thiscould lead to sensitive information disclosure.