Imanager@3.0.2 Security Vulnerabilities and Issues — Imanager@3.0.2 CVE List

Lucene search

NetiqImanager3.0.2

6 matches found

CVE•added 2017/04/27 2:59 p.m.•48 views

CVE-2017-5186

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing algorithm in a communications certificate.

7.5CVSS7.5AI score0.00468EPSS

CVE•added 2017/05/03 5:59 a.m.•41 views

CVE-2017-7432

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.

9.8CVSS9.4AI score0.0109EPSS

CVE•added 2017/05/03 5:59 a.m.•40 views

CVE-2017-7428

NetIQ iManager 3.x before 3.0.3.1 has an issue in the renegotiation of connection parameters with Tomcat.

5.3CVSS5.3AI score0.00344EPSS

CVE•added 2017/05/03 5:59 a.m.•39 views

CVE-2017-7431

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.

8.8CVSS8.6AI score0.00275EPSS

CVE•added 2017/05/03 5:59 a.m.•37 views

CVE-2017-7430

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework.

6.1CVSS6AI score0.00661EPSS

CVE•added 2018/03/02 8:29 p.m.•35 views

CVE-2017-5189

NetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel, allowing attackers to extract and establish their own connections to the Sentinel appliance.

7.5CVSS5.9AI score0.00182EPSS