Microfocus Imanager vulnerabilities

22 vulnerabilities

Known vulnerabilities in Microfocus Imanager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2018-17949micro focusnetiq imanager 3.1 sp2+1
EPSS score
0.65%
Cross site scripting vulnerability in iManager prior to 3.1 SP2.8.8CVE-2021-38116microfocusimanager+1
EPSS score
0.62%
Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. This impacts all versions before 3.2.56.1CVE-2021-38134microfocusimanager+1
EPSS score
0.29%
Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.9.8CVE-2021-38135microfocusimanager+1
EPSS score
0.45%
Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.9.8CVE-2021-38117microfocusimanager+1
EPSS score
1.14%
Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.6.1CVE-2021-38119microfocusimanager+1
EPSS score
0.31%
Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.7.8CVE-2021-38118microfocusimanager+1
EPSS score
0.21%
Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.7.6CVE-2020-11859microfocusimanager+1
EPSS score
0.35%
Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.37.6CVE-2022-26324microfocusimanager+1
EPSS score
0.29%
Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.7.4CVE-2024-4429microfocusimanager+1
EPSS score
0.18%
Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information disclosure.9.8CVE-2024-3486microfocusimanager+1
EPSS score
0.47%
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution.7.5CVE-2024-3485microfocusimanager+1
EPSS score
0.26%
Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure.9.8CVE-2024-3484microfocusimanager+1
EPSS score
0.51%
Path Traversal found in OpenText™ iManager 3.2.6.0200. This can lead to privilege escalation or file disclosure.9.8CVE-2024-3488microfocusimanager+1
EPSS score
0.37%
File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication.9.8CVE-2024-3969microfocusimanager+1
EPSS score
0.50%
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload9.8CVE-2024-3483microfocusimanager+1
EPSS score
0.98%
Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command injection and insecure deserialization issues.7.5CVE-2024-3970microfocusimanager+1
EPSS score
0.51%
Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory traversal.9.8CVE-2024-3487microfocusimanager+1
EPSS score
0.42%
Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypass authentication.9.8CVE-2024-3968microfocusimanager+1
EPSS score
0.68%
Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task.9.8CVE-2024-3967microfocusimanager+1
EPSS score
0.64%
Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java object deserialization.