netiq Vulnerability Advisory Catalog

Total 65 security vulnerabilities recorded for netiq software and firmware.

← Back to All Vendors
Component: identity_manager_rest_driver

Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in OpenTextโ„ข Identity Manager REST D...

๐Ÿ“… 2024-09-12
CVSS 4.9 Dossier →
Component: access_manager

This allows the information exposure to unauthorized users.ย This issue affects NetIQ Access Manager using version 4.5 or before...

๐Ÿ“… 2024-06-11
CVSS 6.5 Dossier →
Component: client_login_extension

Authorization Bypass Through User-Controlled Key vulnerability in NetIQ (OpenText) Client Login Extension on Windows allows Privilege Escalation, Code...

๐Ÿ“… 2024-02-29
CVSS 7.1 Dossier →
Component: imanager

Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious scripts on the user's browser. ...

๐Ÿ“… 2023-01-26
CVSS 7.2 Dossier →
Component: identity_manager

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on ...

๐Ÿ“… 2023-01-26
CVSS 1.8 Dossier →
Component: self_service_password_reset

An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be ...

๐Ÿ“… 2019-06-24
CVSS 7.5 Dossier →
Component: imanager

NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities....

๐Ÿ“… 2018-07-10
CVSS 4.8 Dossier →
Component: edirectory

Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation....

๐Ÿ“… 2018-07-10
CVSS 3.5 Dossier →
CVE-2017-9284 MEDIUM
Component: identity_manager

IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information....

๐Ÿ“… 2018-04-26
CVSS 4.8 Dossier →
Component: identity_reporting

NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack....

๐Ÿ“… 2018-04-26
CVSS 2.8 Dossier →
Component: identity_manager

The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information....

๐Ÿ“… 2018-03-28
CVSS 3.9 Dossier →
Component: identity_manager

The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection....

๐Ÿ“… 2018-03-28
CVSS 2.1 Dossier →
CVE-2018-7673 MEDIUM
Component: identity_manager

The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack....

๐Ÿ“… 2018-03-26
CVSS 5.1 Dossier →
Component: identity_manager

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration....

๐Ÿ“… 2018-03-26
CVSS 2.3 Dossier →
Component: identity_manager

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration....

๐Ÿ“… 2018-03-26
CVSS 2.3 Dossier →
CVE-2018-1348 MEDIUM
Component: identity_manager

NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack....

๐Ÿ“… 2018-03-26
CVSS 5.3 Dossier →
CVE-2018-1347 MEDIUM
Component: imanager

The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting....

๐Ÿ“… 2018-03-21
CVSS 5.3 Dossier →
Component: edirectory

Addresses denial of service attack to eDirectory versions prior to 9.1....

๐Ÿ“… 2018-03-21
CVSS 3.1 Dossier →
CVE-2018-1345 MEDIUM
Component: imanager

NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack....

๐Ÿ“… 2018-03-21
CVSS 5.9 Dossier →
Component: imanager

Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1...

๐Ÿ“… 2018-03-21
CVSS 3.1 Dossier →
Component: access_manager

A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4....

๐Ÿ“… 2018-03-14
CVSS 3.5 Dossier →
Component: access_manager

A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component....

๐Ÿ“… 2018-03-14
CVSS 3.5 Dossier →
CVE-2018-1343 CRITICAL
Component: privileged_account_manager

PAM exposure enabling unauthenticated access to remote host...

๐Ÿ“… 2018-03-06
CVSS 9.8 Dossier →
CVE-2017-7437 MEDIUM
Component: privileged_account_manager

NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via the "type" and "account" parameters of json reques...

๐Ÿ“… 2018-03-05
CVSS 4.6 Dossier →
Page 1 of 3 (65 Total Records)