Imanager@2.7 Security Vulnerabilities and Issues — Imanager@2.7 CVE List

Lucene search

NovellImanager2.7

5 matches found

CVE•added 2017/05/03 5:59 a.m.•41 views

CVE-2017-7432

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.

9.8CVSS9.4AI score0.0109EPSS

CVE•added 2013/04/24 10:28 a.m.•39 views

CVE-2013-1088

Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container.

6.8CVSS7.5AI score0.0059EPSS

CVE•added 2017/05/03 5:59 a.m.•39 views

CVE-2017-7431

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.

8.8CVSS8.6AI score0.00275EPSS

CVE•added 2017/05/03 5:59 a.m.•37 views

CVE-2017-7430

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework.

6.1CVSS6AI score0.00661EPSS

CVE•added 2013/04/24 10:28 a.m.•35 views

CVE-2013-3268

Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors.

10CVSS6.8AI score0.00188EPSS