CVE-2018-1347 The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site…

Description

The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting.

Affected products and versions

Product	Affected versions	Fixed in
iManager 3.1	earliest → < 3.1	3.1

Other CVEs of iManager

The 5 CVEs of iManager →

CVE-2018-12462 NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities 4.8 Medium CVE-2018-1344 Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1 3.1 Low CVE-2018-1345 NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack 5.9 Medium CVE-2017-5189 NetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel,… 4.3 Medium