Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: NetIQ iManager 3.1 Clear all filters
TI-2018-01247 CVE-2018-1347 · GHSA-6qv5-x69x-w977

NetIQ iManager, versions prior to 3.1, reflected XSS issue

Priority LOW 28

The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00729 Published 2018-03-21 Fixed in 3.1 CWE-79
TI-2018-01245 CVE-2018-1345 · GHSA-3x5x-7q5j-v688

iManager elevation of privilege

Priority LOW 39

NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00649 Published 2018-03-21 Fixed in 3.1
TI-2018-01244 CVE-2018-1344 · GHSA-92gg-f7fx-jf62

NetIQ iManager Communication Downgrade Attack

Priority LOW 39

Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0086 Published 2018-03-21 Fixed in 3.1