Netiq vulnerabilities
71 vulnerabilities
Known vulnerabilities in Netiq products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 17 products.
Products
17- Access Manager24 vulnerabilities
- Identity Manager21 vulnerabilities
- Imanager12 vulnerabilities
- Edirectory5 vulnerabilities
- Privileged Account Manager3 vulnerabilities
- Netiq Access Manager (Nam) Admin Console2 vulnerabilities
- Access Governance Suite1 vulnerabilities
- Client Login Extension1 vulnerabilities
- Identity Manager Applications1 vulnerabilities
- Identity Manager Oracle EBS Driver1 vulnerabilities
- Identity Manager Plug Ins1 vulnerabilities
- Identity Manager Rest Driver1 vulnerabilities
- Identity Reporting1 vulnerabilities
- IDM Identity Applications1 vulnerabilities
- Pssecure1 vulnerabilities
- Self Service Password Reset1 vulnerabilities
- Sentinel1 vulnerabilities
CVE-2018-1347netiqimanager
EPSS score0.73%
The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting.CVE-2018-1346netiqedirectoryEPSS score1.24%
Addresses denial of service attack to eDirectory versions prior to 9.1.CVE-2018-1343micro focusnetiq privileged account manager (pam) 3.1 and 3.2+1EPSS score1.36%
PAM exposure enabling unauthenticated access to remote hostCVE-2018-1344netiqimanagerEPSS score0.86%
Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1CVE-2018-1349netiqidentity_managerEPSS score0.78%
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration.CVE-2018-1342micro focusnetiq access manager, administrative console+1EPSS score1.17%
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.CVE-2018-1348netiqidentity_managerEPSS score1.04%
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack.CVE-2018-1345netiqimanagerEPSS score0.65%
NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack.CVE-2018-1350netiqidentity_managerEPSS score0.78%
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration.CVE-2018-7674netiqidentity_managerEPSS score0.75%
The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection.CVE-2018-7676netiqidentity_managerEPSS score0.85%
The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information.CVE-2018-7673netiqidentity_managerEPSS score0.82%
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack.CVE-2018-7677netiqaccess_manager+1EPSS score0.52%
A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component.CVE-2018-7678netiqaccess_manager+1EPSS score0.61%
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4.CVE-2018-12462netiqimanagerEPSS score0.58%
NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities.CVE-2018-12461netiqedirectoryEPSS score0.49%
Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation.CVE-2015-0787netiqidentity_managerEPSS score0.77%
XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of the forgotUser.do CGI.CVE-2007-4526netiqidentity_managerEPSS score0.40%
The Client Login Extension (CLE) in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which allows local users to obtain sensitive information by reading this file.CVE-2016-1605netiqsentinelEPSS score3.81%
Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a PREVIEW value for the fileType field.CVE-2016-1597netiqaccess_governance_suiteEPSS score1.24%
A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to administrator.