{"id":"CVE-2018-1342","aliases":["EUVD-2018-11921","GHSA-jfx9-vg7r-6w3q"],"status":"published","title":"A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console...","description":"A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01169,"percentile":0.67592,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2018-01-26T02:00:00Z","modified":"2026-06-17T01:51:03Z","products":[{"vendor":"micro focus","product":"netiq access manager, administrative console"},{"vendor":"netiq","product":"access_manager"}],"references":[{"url":"https://www.novell.com/support/kb/doc.php?id=7022444","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1342"},{"url":"https://github.com/advisories/GHSA-jfx9-vg7r-6w3q"}],"sources":{"cve":[{"id":"CVE-2018-1342","description":"A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.","status":"published","published":"2018-01-26T02:00:00Z","modified":"2024-09-16T16:43:19.334Z","updated_at":"2026-11-02T14:35:09.139955Z"}],"euvd":[{"id":"EUVD-2018-11921","description":"A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.","status":"published","published":"2018-01-26T02:00:00Z","modified":"2024-09-16T16:43:19Z","updated_at":"2026-11-03T00:55:48.659023Z"}],"ghsa":[{"id":"GHSA-jfx9-vg7r-6w3q","title":"A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console...","description":"A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.","status":"published","published":"2022-05-14T03:44:56Z","modified":"2023-02-03T05:00:30Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:52:47.993176Z"}],"nvd":[{"id":"CVE-2018-1342","description":"A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.","status":"published","published":"2018-01-26T02:29:03.94Z","modified":"2026-06-17T01:51:03.707Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:04:22.897995Z"}]}}