Vulnerabilities > Netiq > Identity Manager > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-01-26 | CVE-2022-26329 | Exposure of Resource to Wrong Sphere vulnerability in Netiq Identity Manager File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. | 5.3 |
| 2018-03-28 | CVE-2018-7676 | Information Exposure vulnerability in Netiq Identity Manager 4.5 The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information. | 5.9 |
| 2018-03-28 | CVE-2018-7674 | Open Redirect vulnerability in Netiq Identity Manager 4.5 The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection. | 6.1 |
| 2018-03-26 | CVE-2018-1350 | Information Exposure Through Log Files vulnerability in Netiq Identity Manager 4.5 The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration. | 5.3 |
| 2018-03-26 | CVE-2018-1349 | Information Exposure Through Log Files vulnerability in Netiq Identity Manager 4.5 The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration. | 5.3 |
| 2018-03-05 | CVE-2017-7427 | Cross-site Scripting vulnerability in Netiq Identity Manager 4.5/4.6 Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. | 6.1 |
| 2016-10-27 | CVE-2016-1592 | Cross-site Scripting vulnerability in Netiq Identity Manager 4.5 XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI. | 6.1 |
| 2016-10-27 | CVE-2015-0787 | Cross-site Scripting vulnerability in Netiq Identity Manager 4.5 XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of the forgotUser.do CGI. | 6.1 |
| 2014-06-21 | CVE-2014-4509 | Local Command Injection vulnerability in Netiq Identity Manager 4.0.2 The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager (aka IDM) 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters. | 4.6 |