Microfocus Edirectory vulnerabilities
16 vulnerabilities
Known vulnerabilities in Microfocus Edirectory, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-17950micro focusnetiq edirectory 9.1 sp2+1
EPSS score0.83%
Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2CVE-2018-17952micro focusnetiq edirectory 9.1 sp2+1EPSS score0.65%
Cross site scripting vulnerability in eDirectory prior to 9.1 SP2CVE-2018-7692micro focusnetiq edirectory versions prior to 9.1.1 hf1+1EPSS score0.65%
Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1.CVE-2018-7686micro focusedirectory (zdi)+1EPSS score1.39%
Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage.CVE-2021-38131microfocusedirectory+1EPSS score0.24%
Possible Cross-Site Scripting (XSS) Vulnerability
in eDirectory has been discovered in
OpenText™ eDirectory 9.2.5.0000.CVE-2021-38132microfocusedirectory+1EPSS score0.40%
Possible
External Service Interaction attack
in eDirectory has been discovered in
OpenText™ eDirectory. This impact all version before 9.2.6.0000.CVE-2021-38133microfocusedirectory+1EPSS score0.35%
Possible
External Service Interaction attack
in eDirectory has been discovered in
OpenText™ eDirectory. This impact all version before 9.2.6.0000.CVE-2021-22503microfocusedirectory+1EPSS score0.24%
Possible
Improper Neutralization of Input During Web Page Generation Vulnerability
in eDirectory has been discovered in
OpenText™ eDirectory 9.2.3.0000.CVE-2021-22533microfocusedirectory+1EPSS score0.44%
Possible Insertion of Sensitive Information into Log File Vulnerability
in eDirectory has been discovered in
OpenText™ eDirectory 9.2.4.0000.CVE-2021-22532microfocusedirectory+1EPSS score0.37%
Possible NLDAP Denial of Service attack Vulnerability
in eDirectory has been discovered in
OpenText™
eDirectory before 9.2.4.0000.CVE-2012-0432microfocusedirectoryEPSS score58.70%
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.CVE-2012-0429microfocusedirectoryEPSS score1.88%
dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.CVE-2012-0428microfocusedirectoryEPSS score1.79%
Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2012-0430microfocusedirectoryEPSS score2.21%
Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors.CVE-2017-9285microfocusedirectory+1EPSS score1.19%
NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services.CVE-2017-7429microfocusedirectory+1EPSS score0.84%
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.