Netiq Identity Manager
10 CVEs affecting Netiq Identity Manager. Latest disclosed: 2019-05-09. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-1600 | High | 7.5 | 2019-05-09 | The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability. |
CVE-2017-7427 | Medium | 5.4 | 2018-03-05 | Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenari… |
CVE-2018-1348 | Medium | 5.3 | 2018-03-26 | NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack. |
CVE-2018-7673 | Medium | 5.1 | 2018-03-26 | The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack. |
CVE-2018-7676 | Low | 3.9 | 2018-03-28 | The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information. |
CVE-2017-7434 | Low | 3.3 | 2018-03-02 | In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles. |
CVE-2018-1350 | Low | 2.3 | 2018-03-26 | The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration. |
CVE-2018-1349 | Low | 2.3 | 2018-03-26 | The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration. |
CVE-2018-7674 | Low | 2.1 | 2018-03-28 | The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection. |
CVE-2017-9279 | Low | 2.0 | 2018-03-02 | NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Admini… |