Imanager@2.7 Security Vulnerabilities and Issues — Imanager@2.7 CVE List

Lucene search

NovellImanager2.7

6 matches found

CVE•added 2017/04/27 2:59 p.m.•49 views

CVE-2017-5186

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing algorithm in a communications certificate.

7.5CVSS7.5AI score0.00468EPSS

CVE•added 2017/05/03 5:59 a.m.•42 views

CVE-2017-7432

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.

9.8CVSS9.4AI score0.0109EPSS

CVE•added 2013/04/24 10:28 a.m.•40 views

CVE-2013-1088

Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container.

6.8CVSS7.5AI score0.0059EPSS

CVE•added 2017/05/03 5:59 a.m.•40 views

CVE-2017-7431

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.

8.8CVSS8.6AI score0.00275EPSS

CVE•added 2017/05/03 5:59 a.m.•38 views

CVE-2017-7430

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework.

6.1CVSS6AI score0.00661EPSS

CVE•added 2013/04/24 10:28 a.m.•36 views

CVE-2013-3268

Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors.

10CVSS6.8AI score0.00188EPSS