Skip to content
Noroxi

NetIQ records

70 published records for vendor netiq.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
1.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 23
  6. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

70 records
  • CVE-2017-14803
    49Plan

    In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO conne

    CriticalCVSS 9.8No exploitEPSS 34%

    netiq · access managerJan 19, 2018

  • CVE-2017-7432
    39Monitor

    Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.

    CriticalCVSS 9.8No exploitEPSS 1%

    novell · imanagerMay 3, 2017

  • CVE-2016-5757
    39Monitor

    iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame manipulation attacks

    CriticalCVSS 9.8No exploitEPSS 1%

    netiq · access managerMar 23, 2017

  • CVE-2018-1343
    39Monitor

    PAM exposure enabling unauthenticated access to remote host

    CriticalCVSS 9.8No exploitEPSS 1%

    netiq · privileged account managerMar 6, 2018

  • CVE-2017-9285
    39Monitor

    Login restrictions not applied when using ebaclient against NetIQ eDirectory EBA interface

    CriticalCVSS 9.8No exploitEPSS 1%

    netiq · edirectoryMar 2, 2018

  • CVE-2018-1342
    39Monitor

    A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them.

    CriticalCVSS 9.8No exploitEPSS 1%

    netiq · access managerJan 25, 2018

  • CVE-2017-9278
    39Monitor

    Avoid password disclosure via EBS event logging in the iManager Oracle driver

    CriticalCVSS 9.8No exploitEPSS 0%

    netiq · identity managerMar 2, 2018

  • CVE-2017-7434
    39Monitor

    NetIQ Identity Manager JDBC driver could leak passwords in exception traces

    CriticalCVSS 9.8No exploitEPSS 0%

    netiq · identity managerMar 2, 2018

  • CVE-2017-7426
    36Monitor

    iManager - XML External Entity vulnerabilities

    CriticalCVSS 9.1No exploitEPSS 1%

    netiq · identity managerMar 1, 2018

  • CVE-2016-1597
    35Monitor

    A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to administrator.

    HighCVSS 8.8No exploitEPSS 1%

    netiq · access governance suiteMar 23, 2017

  • CVE-2016-5750
    35Monitor

    The certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to upload J

    HighCVSS 8.8No exploitEPSS 1%

    netiq · access managerMar 23, 2017

  • CVE-2017-7429
    35Monitor

    Fix for NetIQ shell code upload

    HighCVSS 8.8No exploitEPSS 0%

    netiq · edirectoryMar 2, 2018

  • CVE-2018-1345
    35Monitor

    iManager elevation of privilege

    HighCVSS 8.8No exploitEPSS 0%

    netiq · imanagerMar 21, 2018

  • CVE-2017-7431
    35Monitor

    Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.

    HighCVSS 8.8No exploitEPSS 0%

    novell · imanagerMay 3, 2017

  • CVE-2018-7677
    35Monitor

    CSRF in NetIQ Access Manager (NAM) Identity Server component

    HighCVSS 8.8No exploitEPSS 0%

    netiq · access managerMar 14, 2018

  • CVE-2016-5758
    35Monitor

    A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumven

    HighCVSS 8.8No exploitEPSS 0%

    netiq · access managerMar 23, 2017

  • CVE-2018-1344
    34Monitor

    NetIQ iManager Communication Downgrade Attack

    HighCVSS 8.6No exploitEPSS 0%

    netiq · imanagerMar 21, 2018

  • CVE-2005-1244
    31Monitor

    Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attacke

    HighCVSS 7.5No exploitEPSS 1%

    netiq · pssecureApr 20, 2005

  • CVE-2024-1470
    31Monitor

    Elevation of Privilege attack on NetIQ Client login extension

    HighCVSS 7.8No exploitEPSS 0%

    netiq · client login extensionFeb 28, 2024

  • CVE-2017-9284
    30Monitor

    IDM 4.6 Identity Applications information leakage

    HighCVSS 7.5No exploitEPSS 1%

    netiq · identity managerApr 26, 2018

  • CVE-2018-1346
    30Monitor

    NetIQ eDirectory Denial of Service

    HighCVSS 7.5No exploitEPSS 1%

    netiq · edirectoryMar 21, 2018

  • CVE-2017-5189
    30Monitor

    private SSL key embedded in JAR file in iManager

    HighCVSS 7.5No exploitEPSS 1%

    netiq · imanagerMar 2, 2018

  • CVE-2017-9280
    30Monitor

    Novell Identity Manager User Application get request url contains the session token.

    HighCVSS 7.5No exploitEPSS 1%

    netiq · identity managerMar 2, 2018

  • CVE-2019-11648
    30Monitor

    An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4.

    HighCVSS 7.5No exploitEPSS 1%

    netiq · self service password resetJun 24, 2019

  • CVE-2016-5754
    30Monitor

    Presence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before SP2.

    HighCVSS 7.5No exploitEPSS 1%

    netiq · access managerMar 23, 2017