Skip to content

Known vulnerabilities in NetIQ Identity Manager

Is your version affected?

CVE Summary Score Published
CVE-2016-1600 The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure… Not rated May 9, 2019
CVE-2018-7676 The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information 3.9 Low Mar 28, 2018
CVE-2018-7674 The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection 2.1 Low Mar 28, 2018
CVE-2018-7673 The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack 5.1 Medium Mar 26, 2018
CVE-2018-1350 The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system… 2.3 Low Mar 26, 2018
CVE-2018-1349 The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or… 2.3 Low Mar 26, 2018
CVE-2018-1348 NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in… 5.3 Medium Mar 26, 2018
CVE-2017-7427 Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before… 5.4 Medium Mar 5, 2018
CVE-2017-9279 NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the… 2.0 Low Mar 2, 2018
CVE-2017-7434 In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in… 3.3 Low Mar 2, 2018

Other NetIQ products