IM
Product
Imanager
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add Imanager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7432 | 9.8 | May 3 | Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability Affected: 2.7; 2.7; 2.7; 2.7; 2.7; 2.7; +16 more |
| CVE-2017-7431 | 8.8 | May 3 | Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management Affected: 2.7; 2.7; 2.7; 2.7; 2.7; 2.7; +16 more |
| CVE-2017-5186 | 7.5 | Apr 27 | Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2… Affected: through 2.7 |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 1.5; 2.0 |
| CVE-2017-7430 | 6.1 | May 3 | Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework Affected: 2.7; 2.7; 2.7; 2.7; 2.7; 2.7; +16 more |
| CVE-2013-3268 | – | Apr 24 | Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors Affected: through 2.7; 2.7; 2.7; 2.7; 2.7; 2.7; +11 more |
| CVE-2013-1088 | – | Apr 24 | Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging… Affected: through 2.7; 2.7; 2.7; 2.7; 2.7; 2.7; +11 more |
| CVE-2011-4188 | – | Apr 9 | Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denial of service (application… Affected: through 2.7.4; 1.5; 2.0; 2.0.2; 2.5; 2.6.0; +4 more |
| CVE-2010-1930 | – | Jun 28 | Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (daemon crash) via a long tree parameter in a login request to… Affected: 2.7.0; 2.7.3; 2.7.3 |
| CVE-2010-1929 | – | Jun 28 | Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3,… Affected: 2.7.0; 2.7.3; 2.7.3 |
| CVE-2009-4486 | – | Jan 8 | Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to… Affected: through 2.7.2; 1.5; 2.0; 2.0.2; 2.5; 2.6.0; +1 more |
| CVE-2008-3488 | – | Aug 6 | Unspecified vulnerability in Novell iManager before 2.7 SP1 (2.7.1) allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors Affected: 1.5; 2.0; 2.0.2; 2.5; 2.5; 2.6.0; +1 more |
| CVE-2006-4517 | – | Nov 1 | Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL… Affected: through 2.5; 1.5; 2.0; 2.0.2 |
| CVE-2005-1730 | – | Dec 31 | Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted… Affected: through 2.0.2 |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: 1.5; 2.0 |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: 1.5; 2.0 |
Showing 16