IM
Product
Imanager
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 5Medium 5Low 0
Watch
Add Imanager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-24467 | 9.8 | Nov 22 | Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000 Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2023-24466 | 9.8 | Nov 22 | Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200 Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2021-38135 | 9.8 | Nov 22 | Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000 Affected: 3.0 through 3.2.5; 3.2.6 |
| CVE-2021-38117 | 9.8 | Nov 22 | Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000 Affected: 3.0 before 3.2.5 |
| CVE-2024-3969 | 9.8 | May 28 | XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200 Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2024-3968 | 9.8 | May 15 | Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2024-3967 | 9.8 | May 15 | Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java object deserialization Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2024-3488 | 9.8 | May 15 | File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2024-3487 | 9.8 | May 15 | Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypass authentication Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2024-3486 | 9.8 | May 15 | XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200 Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2024-3484 | 9.8 | May 15 | Path Traversal found in OpenText™ iManager 3.2.6.0200 Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2024-3483 | 9.8 | May 15 | Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command injection and insecure deserialization issues Affected: 3.0 through 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2021-38116 | 8.8 | Nov 22 | Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager Affected: before 3.2.5 |
| CVE-2021-38118 | 7.8 | Nov 22 | Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000 Affected: 3.0 before 3.2.5 |
| CVE-2024-3970 | 7.5 | May 15 | Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200 Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2024-3485 | 7.5 | May 15 | Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200 Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2024-4429 | 7.4 | May 28 | Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200 Affected: 3.0 before 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6; 3.2.6 |
| CVE-2021-38134 | 6.1 | Nov 22 | Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000 Affected: 3.0 before 3.2.6 |
| CVE-2021-38119 | 6.1 | Nov 22 | Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000 Affected: 3.0 before 3.2.5 |
| CVE-2018-17949 | 6.1 | Dec 12 | Cross site scripting vulnerability in iManager prior to 3.1 SP2 Affected: before 3.1.2 |
| CVE-2022-26324 | 5.4 | Nov 22 | Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000 Affected: 3.2.6 |
| CVE-2020-11859 | 5.4 | Nov 6 | Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3 Affected: before 3.2.3 |
Showing 22