Read the docs

NetIQ

Records72All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

NetIQ records in CISA KEV

No NetIQ vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Access Manager 24 records HIGH Identity Manager 20 records MEDIUM Imanager 12 records MEDIUM Edirectory 5 records MEDIUM Privileged Account Manager 3 records MEDIUM Access Governance Suite 1 record MEDIUM Client Login Extension 1 record LOW Identity Manager Rest Driver 1 record LOW

Records

3 records in Privileged Account Manager · all components

TI-2017-05089 CVE-2017-7437 · GHSA-36hh-v57m-3mm5

Cross site scripting attacks against NetIQ Privileged Account Manager

Priority LOW 29

NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via the "type" and "account" parameters of json requests.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00749 Published 2018-03-05 Fixed in 3.1 Patch Update 3 CWE-79
TI-2017-05090 CVE-2017-7438 · GHSA-q4cr-wchq-x2c6

DOM cross site scripting attack against NetIQ Privileged Account Manager

Priority LOW 28

NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via javascript DOM modification using the supplied cookie parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00612 Published 2018-03-02 Fixed in 3.1 Patch Update 3 CWE-79
Open these records in search →