Read the docs

NetIQ

Records72All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

NetIQ records in CISA KEV

No NetIQ vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Access Manager 24 records HIGH Identity Manager 20 records MEDIUM Imanager 12 records MEDIUM Edirectory 5 records MEDIUM Privileged Account Manager 3 records MEDIUM Access Governance Suite 1 record MEDIUM Client Login Extension 1 record LOW Identity Manager Rest Driver 1 record LOW

Records

5 records in Edirectory · all components

TI-2017-05081 CVE-2017-7429 · GHSA-9qwr-3g3j-q9gj

Fix for NetIQ shell code upload

Priority MEDIUM 40

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00842 Published 2018-03-02 Fixed in 8.8.8 Patch 10 HF1 CWE-434
TI-2018-01246 CVE-2018-1346 · GHSA-vf9x-hpmv-92qm

NetIQ eDirectory Denial of Service

Priority LOW 35

Addresses denial of service attack to eDirectory versions prior to 9.1.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01239 Published 2018-03-21 Fixed in 9.1
TI-2017-03301 CVE-2017-5186 · GHSA-v5pw-67rf-j965

Broken or risky cryptographic algorithm in NetIQ/Novell iManager and eDirectory

Priority LOW 34

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00641 Published 2017-04-27 No fix listed CWE-327
TI-2018-08947 CVE-2018-12461 · GHSA-fp9p-68v5-x9cv

Certificate Revocation Check failure

Priority LOW 33

Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2018-07-10 Fixed in 9.1.1 CWE-295
Open these records in search →