Imanager (Novell) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 41 known versions, newest CVE from 2017-05-03. Vendor: Novell.
CVEs of Imanager
- CVE-2017-7432 - CVSS 9.8 (critical), 2017-05-03: Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.
- CVE-2017-7431 - CVSS 8.8 (high), 2017-05-03: Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.
- CVE-2017-7430 - CVSS 6.1 (medium), 2017-05-03: Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework.
- CVE-2017-5186 - CVSS 7.5 (high), 2017-04-27: Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x…
- CVE-2013-3268 - CVSS 10 (critical), 2013-04-24: Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors.
- CVE-2013-1088 - CVSS 6.8 (medium), 2013-04-24: Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary…
- CVE-2011-4188 - CVSS 4 (medium), 2012-04-09: Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denial of…
- CVE-2010-1930 - CVSS 5 (medium), 2010-06-28: Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (daemon crash) via a long tree parameter…
- CVE-2010-1929 - CVSS 9 (critical), 2010-06-28: Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell…
- CVE-2009-4486 - CVSS 7.5 (high), 2010-01-08: Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that…
- CVE-2008-3488 - CVSS 7.5 (high), 2008-08-06: Unspecified vulnerability in Novell iManager before 2.7 SP1 (2.7.1) allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown…
- CVE-2006-4517 - CVSS 7.8 (high), 2006-11-01: Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST,…
- CVE-2005-1730 - CVSS 9.3 (critical), 2005-12-31: Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer…
- CVE-2004-0112 - CVSS 5 (medium), 2004-11-23: The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets…
- CVE-2004-0081 - CVSS 5 (medium), 2004-11-23: OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as…
- CVE-2004-0079 - CVSS 7.5 (high), 2004-11-23: The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a…
