Novell Identity Manager vulnerabilities

3 vulnerabilities

Known vulnerabilities in Novell Identity Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2007-6625novellidentity_manager
EPSS score
1.75%
The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as demonstrated by a Nessus scan.5.4CVE-2016-1598novellidentity_manager+1
EPSS score
0.56%
XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.2.1CVE-2010-3264novellidentity_manager
EPSS score
0.30%
The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file.