Netiq vulnerabilities
36 CVEs and advisories name Netiq as an affected vendor, newest first. Follow it as a feed.
- CVE-2016-1600The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability.
- CVE-2018-12462NetIQ iManager XSS vulnerabilities
- CVE-2018-12461Certificate Revocation Check failure
- CVE-2017-9284IDM 4.6 Identity Applications information leakage
- CVE-2017-9275NetIQ Identity Reporting XSS exposure
- CVE-2018-7676IDM Information Leakage
- CVE-2018-7674IDM URL Redirection attack
- CVE-2018-7673NetIQ Identity Manager DoS Attack
- CVE-2018-1350NetIQ Identity Manager Driver Component Information Leakage
- CVE-2018-1349NetIQ Identity Manager Driver Component Log File Information Leakage
- CVE-2018-1348NetIQ Identity Manager SSL Renegotiation
- CVE-2018-1347NetIQ iManager, versions prior to 3.1, reflected XSS issue
- CVE-2018-1346NetIQ eDirectory Denial of Service
- CVE-2018-1345iManager elevation of privilege
- CVE-2018-1344NetIQ iManager Communication Downgrade Attack
- CVE-2018-7678XSS vulnerability in NetIQ Access Manager (NAM) Admin Console component
- CVE-2018-7677CSRF in NetIQ Access Manager (NAM) Identity Server component
- CVE-2018-7675Potential Information Disclosure in Sentinel
- CVE-2017-7437Cross site scripting attacks against NetIQ Privileged Account Manager
- CVE-2017-7427iManager - Multiple Reflected Cross-Site Scripting attacks
- CVE-2017-9285Login restrictions not applied when using ebaclient against NetIQ eDirectory EBA interface
- CVE-2017-9280Novell Identity Manager User Application get request url contains the session token.
- CVE-2017-9279NetIQ Identity Manager allowed uploading of user icons with incorrect types or extensions
- CVE-2017-9278Avoid password disclosure via EBS event logging in the iManager Oracle driver
- CVE-2017-9276XSS Vulnerability in iManager
- CVE-2017-7438DOM cross site scripting attack against NetIQ Privileged Account Manager
- CVE-2017-7434NetIQ Identity Manager JDBC driver could leak passwords in exception traces
- CVE-2017-7429Fix for NetIQ shell code upload
- CVE-2017-7419NetIQ Access Manager OAuth Consent screen XSS attack
- CVE-2017-5189private SSL key embedded in JAR file in iManager