IM
Product
Identity Manager
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 8Low 0
Watch
Add Identity Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-9278 | 9.8 | Mar 2 | The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the… Affected: before 4.0.2.0 |
| CVE-2017-7434 | 9.8 | Mar 2 | In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles Affected: before 4.6 |
| CVE-2017-7426 | 9.1 | Mar 1 | The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity (XXE) handling flaws that could be used by attackers to leak information or cause denial… Affected: before 4.6.1 |
Showing 3
