Vulnerabilities in NetIQ

34 results
Vexday analysis

NetIQ apresenta 34 vulnerabilidades catalogadas, predominantemente de injeção de script entre sites (CWE-79), mas sem registros de exploração ativa nem descobertas recentes. O risco atual é moderado e não representa ameaça imediata, embora demande atenção contínua em ambientes que dependem dessa plataforma.

CVE-2017-7437MEDIUMCross site scripting attacks against NetIQ Privileged Account ManagerEPSS 0.8%CVE-2017-7419MEDIUMNetIQ Access Manager OAuth Consent screen XSS attackEPSS 0.8%CVE-2018-7674LOWIDM URL Redirection attackEPSS 0.8%CVE-2017-14801MEDIUMReflected xss in Admin Console REST interfaceEPSS 0.8%CVE-2018-1347MEDIUMNetIQ iManager, versions prior to 3.1, reflected XSS issueEPSS 0.7%CVE-2017-14800MEDIUMReflected xss on Access Manager iManager UIEPSS 0.7%CVE-2017-14799MEDIUMXSS Vulnerability with ESP URLEPSS 0.7%CVE-2018-1345MEDIUMiManager elevation of privilegeEPSS 0.7%CVE-2017-7438MEDIUMDOM cross site scripting attack against NetIQ Privileged Account ManagerEPSS 0.6%CVE-2018-7678LOWXSS vulnerability in NetIQ Access Manager (NAM) Admin Console componentEPSS 0.6%CVE-2017-9275LOWNetIQ Identity Reporting XSS exposureEPSS 0.6%CVE-2018-12462MEDIUMNetIQ iManager XSS vulnerabilitiesEPSS 0.6%CVE-2018-7677LOWCSRF in NetIQ Access Manager (NAM) Identity Server componentEPSS 0.5%CVE-2018-12461LOWCertificate Revocation Check failureEPSS 0.5%