Identity Manager (Novell) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2016-10-27. Vendor: Novell.

CVEs of Identity Manager

• CVE-2016-1598 - CVSS 5.4 (medium), 2016-10-27: XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment…
• CVE-2010-4324 - CVSS 4.3 (medium), 2011-01-07: Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell…
• CVE-2010-3264 - CVSS 2.1 (low), 2010-09-08: The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain…
• CVE-2007-6625 - CVSS 5 (medium), 2008-01-04: The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial…