CVE-2017-5186

CVE-2017-5186 affects Novell iManager and NetIQ eDirectory (versions listed in the CVE) and is due to the use of the deprecated MD5 hashing algorithm in a communications certificate. The connected SUSE entry reiterates the same affected products and patch level references. The provided sources do...

CVE-2022-38758

NetIQ iManager prior to version 3.2.6 is affected by a Cross-site Scripting (XSS) vulnerability that lets an attacker cause the victim’s browser to execute malicious scripts. The issue affects Micro Focus NetIQ iManager on all platforms with versions older than 3.2.6. Root cause details are not e...

CVE-2017-7431

CVE-2017-7431 affects Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1, with a persistent CSRF flaw in object management. Root cause: CSRF in the management interface enabling unauthorized operations. Impact: potential unauthorized changes via authenticated ...

CVE-2017-7432

CVE-2017-7432 affects Novell iManager 2.7.x prior to 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x prior to 3.0.3.1. The connected records confirm a webshell upload vulnerability in these versions. No explicit root cause, exploit details, or impact beyond webshell upload are provided in the documen...

CVE-2017-7428

NetIQ iManager 3.x before 3.0.3.1 contains a flaw in negotiating Tomcat connection parameters. The issue is described as a renegotiation problem during parameter exchange with Tomcat, affecting NetIQ iManager 3.x prior to 3.0.3.1. The CVSS data indicates an overall Medium impact with partial avai...

CVE-2017-7425

CVE-2017-7425 corresponds to a cross-site scripting (XSS) vulnerability in NetIQ iManager Web UI. The connected CNVD entry confirms that versions prior to 2.7.7 Patch 10 HF2 and prior to 3.0.3.2 are affected, with a remote attacker able to execute arbitrary JavaScript in the context of the affect...

CVE-2017-7430

The CVE-2017-7430 entry covers a persistent XSS vulnerability in the Framework of Novell iManager 2.7.x (before 2.7 SP7 Patch 10 HF1) and NetIQ iManager 3.x (before 3.0.3.1). Root cause: improper handling/injection point in the Framework that allows crafted input to be stored or repeatedly reflec...

CVE-2017-5189

CVE-2017-5189 affects NetIQ iManager prior to 3.0.3, where a SSL private key was embedded in a Java application (JAR) used to authenticate to the Sentinel appliance. This flaw enables an attacker to extract the private key and establish their own connections to Sentinel. The available sources des...

CVE-2018-12462

CVE-2018-12462 concerns the NetIQ iManager 3.1.1 product, described in connected sources as addressing potential XSS vulnerabilities . The documents confirm the affected software and the vulnerability category but do not provide detailed root cause analysis, affected components, specific versions...

CVE-2018-1344

CVE-2018-1344 affects NetIQ iManager prior to version 3.1. The issue enables a communication downgrade attack against iManager, with the NVD entry noting an 8.6 (HIGH) CVSS3 impact (network attack, no authentication required, integrity HIGH, confidentiality NONE, availability NONE). The CNVD entr...

CVE-2018-1347

NetIQ iManager admin web interface (versions prior to 3.1) is affected by a reflected cross-site scripting (XSS) vulnerability. The issue arises in the administrative web interface and reflects attacker-supplied input in the response, enabling potential script execution. The provided data cites C...

CVE-2018-1345

NetIQ iManager is affected for versions prior to 3.1, where under some circumstances an elevation of privilege is possible. The issue is documented across multiple sources (NVD/CNVD) with the core description that older iManager releases could allow a user to obtain higher privileges. The exact r...