# cve.now: Netiq

The newest entries naming Netiq as an affected vendor (up to 200), of 36 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2016-1600](https://cve.now/CVE-2016-1600.md): The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability. (no CVSS)
- [CVE-2018-12462](https://cve.now/CVE-2018-12462.md): NetIQ iManager XSS vulnerabilities (CVSS 4.8)
- [CVE-2018-12461](https://cve.now/CVE-2018-12461.md): Certificate Revocation Check failure (CVSS 3.5)
- [CVE-2017-9284](https://cve.now/CVE-2017-9284.md): IDM 4.6 Identity Applications information leakage (CVSS 4.8)
- [CVE-2017-9275](https://cve.now/CVE-2017-9275.md): NetIQ Identity Reporting XSS exposure (CVSS 2.8)
- [CVE-2018-7676](https://cve.now/CVE-2018-7676.md): IDM Information Leakage (CVSS 3.9)
- [CVE-2018-7674](https://cve.now/CVE-2018-7674.md): IDM URL Redirection attack (CVSS 2.1)
- [CVE-2018-7673](https://cve.now/CVE-2018-7673.md): NetIQ Identity Manager DoS Attack (CVSS 5.1)
- [CVE-2018-1350](https://cve.now/CVE-2018-1350.md): NetIQ Identity Manager Driver Component Information Leakage (CVSS 2.3)
- [CVE-2018-1349](https://cve.now/CVE-2018-1349.md): NetIQ Identity Manager Driver Component Log File Information Leakage (CVSS 2.3)
- [CVE-2018-1348](https://cve.now/CVE-2018-1348.md): NetIQ Identity Manager SSL Renegotiation (CVSS 5.3)
- [CVE-2018-1347](https://cve.now/CVE-2018-1347.md): NetIQ iManager, versions prior to 3.1, reflected XSS issue (CVSS 5.3)
- [CVE-2018-1346](https://cve.now/CVE-2018-1346.md): NetIQ eDirectory Denial of Service (CVSS 3.1)
- [CVE-2018-1345](https://cve.now/CVE-2018-1345.md): iManager elevation of privilege (CVSS 5.9)
- [CVE-2018-1344](https://cve.now/CVE-2018-1344.md): NetIQ iManager Communication Downgrade Attack (CVSS 3.1)
- [CVE-2018-7678](https://cve.now/CVE-2018-7678.md): XSS vulnerability in NetIQ Access Manager (NAM) Admin Console component (CVSS 3.5)
- [CVE-2018-7677](https://cve.now/CVE-2018-7677.md): CSRF in NetIQ Access Manager (NAM) Identity Server component (CVSS 3.5)
- [CVE-2018-7675](https://cve.now/CVE-2018-7675.md): Potential Information Disclosure in Sentinel (CVSS 2.8)
- [CVE-2017-7437](https://cve.now/CVE-2017-7437.md): Cross site scripting attacks against NetIQ Privileged Account Manager (CVSS 4.6)
- [CVE-2017-7427](https://cve.now/CVE-2017-7427.md): iManager - Multiple Reflected Cross-Site Scripting attacks (CVSS 5.4)
- [CVE-2017-9285](https://cve.now/CVE-2017-9285.md): Login restrictions not applied when using ebaclient against NetIQ eDirectory EBA interface (CVSS 5.4)
- [CVE-2017-9280](https://cve.now/CVE-2017-9280.md): Novell Identity Manager User Application get request url contains the session token. (CVSS 4.3)
- [CVE-2017-9279](https://cve.now/CVE-2017-9279.md): NetIQ Identity Manager allowed uploading of user icons with incorrect types or extensions (CVSS 2.0)
- [CVE-2017-9278](https://cve.now/CVE-2017-9278.md): Avoid password disclosure via EBS event logging in the iManager Oracle driver (CVSS 3.3)
- [CVE-2017-9276](https://cve.now/CVE-2017-9276.md): XSS Vulnerability in iManager (CVSS 5.4)
- [CVE-2017-7438](https://cve.now/CVE-2017-7438.md): DOM cross site scripting attack against NetIQ Privileged Account Manager (CVSS 4.6)
- [CVE-2017-7434](https://cve.now/CVE-2017-7434.md): NetIQ Identity Manager JDBC driver could leak passwords in exception traces (CVSS 3.3)
- [CVE-2017-7429](https://cve.now/CVE-2017-7429.md): Fix for NetIQ shell code upload (CVSS 8.8)
- [CVE-2017-7419](https://cve.now/CVE-2017-7419.md): NetIQ Access Manager OAuth Consent screen XSS attack (CVSS 4.6)
- [CVE-2017-5189](https://cve.now/CVE-2017-5189.md): private SSL key embedded in JAR file in iManager (CVSS 4.3)
- [CVE-2017-14802](https://cve.now/CVE-2017-14802.md): Unvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLs (CVSS 5.4)
- [CVE-2017-14801](https://cve.now/CVE-2017-14801.md): Reflected xss in Admin Console REST interface (CVSS 4.6)
- [CVE-2017-7426](https://cve.now/CVE-2017-7426.md): iManager - XML External Entity vulnerabilities (CVSS 5.4)
- [CVE-2017-14800](https://cve.now/CVE-2017-14800.md): Reflected xss on Access Manager iManager UI (CVSS 5.4)
- [CVE-2017-14799](https://cve.now/CVE-2017-14799.md): XSS Vulnerability with ESP URL (CVSS 4.6)
- [CVE-2017-7425](https://cve.now/CVE-2017-7425.md): Multiple Reflected XSS in iManager (CVSS 7.6)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/netiq
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.