Skip to content
Netiq Access Manager vulnerabilities
-
microfocus netiq access manager, netiq access manager +1 more
Multiple xss vulnerability in NetIQ Access Manager
CVE-2024-4554
7.3 High
-
microfocus netiq access manager, netiq access manager +1 more
User impersonation with MFA when configure in specific way
CVE-2024-4555
7.7 High
-
microfocus netiq access manager, netiq access manager +1 more
Directory traversal vulnerability in NetIQ Access Manager
CVE-2024-4556
5.7 Medium
-
netiq access manager, opentext netiq access manager +1 more
Potential information leakage in administrator enabled debug mode
CVE-2020-11843
6.5 Medium
-
netiq access manager, access manager (nam) admin console +1 more
XSS vulnerability in NetIQ Access Manager (NAM) Admin Console component
CVE-2018-7678
3.5 Low
-
netiq access manager, access manager (nam) admin console +1 more
CSRF in NetIQ Access Manager (NAM) Identity Server component
CVE-2018-7677
3.5 Low
-
netiq access manager
XSS Vulnerability in iManager
CVE-2017-9276
5.4 Medium
-
netiq access manager
NetIQ Access Manager OAuth Consent screen XSS attack
CVE-2017-7419
4.6 Medium
-
netiq access manager
Unvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLs
CVE-2017-14802
5.4 Medium
-
netiq access manager
Reflected xss in Admin Console REST interface
CVE-2017-14801
4.6 Medium
-
netiq access manager
Reflected xss on Access Manager iManager UI
CVE-2017-14800
5.4 Medium
-
netiq access manager
XSS Vulnerability with ESP URL
CVE-2017-14799
4.6 Medium
-
netiq access manager, micro focus netiq access manager, administrative console +1 more
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console...
CVE-2018-1342
9.8 Critical
-
micro focus netiq access manager, netiq access manager +1 more
In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO...
CVE-2017-14803
EPSS 34.6%
9.8 Critical
-
netiq access manager
An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because...
CVE-2017-5191
6.1 Medium
-
netiq access manager
NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when configured as an Identity Server, has...
CVE-2017-5183
6.1 Medium
-
netiq access manager
NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0...
CVE-2017-5190
3.1 Low
-
netiq access manager, opentext netiq access manager +1 more
A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot...
CVE-2016-5758
8.8 High
-
netiq access manager, opentext netiq access manager +1 more
iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2...
CVE-2016-5757
9.8 Critical
-
netiq access manager, opentext netiq access manager +1 more
Multiple components of the web tools in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2...
CVE-2016-5756
6.1 Medium
-
netiq access manager, opentext netiq access manager +1 more
NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to...
CVE-2016-5755
6.5 Medium
-
netiq access manager, opentext netiq access manager +1 more
Presence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot...
CVE-2016-5754
7.5 High
-
netiq access manager, opentext netiq access manager +1 more
The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2...
CVE-2016-5752
7.5 High
-
netiq access manager, opentext netiq access manager +1 more
An unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ...
CVE-2016-5751
6.1 Medium
-
netiq access manager, micro focus netiq imanager +1 more
The certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and...
CVE-2016-5750
8.8 High
-
netiq access manager, opentext netiq access manager +1 more
NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML...
CVE-2016-5749
5.5 Medium
-
netiq access manager, opentext netiq access manager +1 more
External Entity Processing (XXE) vulnerability in the "risk score" application of NetIQ Access...
CVE-2016-5748
5.5 Medium