Read the docs

NetIQ

Records72All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

NetIQ records in CISA KEV

No NetIQ vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Access Manager 24 records HIGH Identity Manager 20 records MEDIUM Imanager 12 records MEDIUM Edirectory 5 records MEDIUM Privileged Account Manager 3 records MEDIUM Access Governance Suite 1 record MEDIUM Client Login Extension 1 record LOW Identity Manager Rest Driver 1 record LOW

Records

12 records in Imanager · all components

TI-2018-01245 CVE-2018-1345 · GHSA-3x5x-7q5j-v688

iManager elevation of privilege

Priority LOW 39

NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00649 Published 2018-03-21 Fixed in 3.1
TI-2018-01244 CVE-2018-1344 · GHSA-92gg-f7fx-jf62

NetIQ iManager Communication Downgrade Attack

Priority LOW 39

Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0086 Published 2018-03-21 Fixed in 3.1
TI-2017-05077 CVE-2017-7425 · GHSA-hfhh-847v-9xvg

Multiple Reflected XSS in iManager

Priority LOW 35

Multiple potential reflected XSS issues exist in NetIQ iManager versions before 2.7.7 Patch 10 HF2 and 3.0.3.2.

CVSS 3.0HIGH 7.6 Adjacent network Low privileges No interaction EPSS 0.00891 Published 2017-11-06 No fix listed CWE-79
TI-2017-03304 CVE-2017-5189 · GHSA-3j2p-fcwj-8pcw

private SSL key embedded in JAR file in iManager

Priority LOW 35

NetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel, allowing attackers to extract and establish their own connections to the Sentinel appliance.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01168 Published 2018-03-02 Fixed in 3.0.3 CWE-522
TI-2017-03301 CVE-2017-5186 · GHSA-v5pw-67rf-j965

Broken or risky cryptographic algorithm in NetIQ/Novell iManager and eDirectory

Priority LOW 34

Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00641 Published 2017-04-27 No fix listed CWE-327
TI-2022-18268 CVE-2022-38758 · GHSA-vm5j-jm47-2g27

XSS vulnerabilities in iManager

Priority LOW 32

Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious scripts on the user's browser.

CVSS 3.1HIGH 7.2 Adjacent network High privileges User interaction EPSS 0.00465 Published 2023-01-25 Fixed in 3.2.6 CWE-79
TI-2018-08948 CVE-2018-12462 · GHSA-6h26-xw86-36mp

NetIQ iManager XSS vulnerabilities

Priority LOW 28

NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00576 Published 2018-07-10 Fixed in 3.1.1 CWE-79
TI-2018-01247 CVE-2018-1347 · GHSA-6qv5-x69x-w977

NetIQ iManager, versions prior to 3.1, reflected XSS issue

Priority LOW 28

The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00729 Published 2018-03-21 Fixed in 3.1 CWE-79
Open these records in search →