Vulnerabilities (CVE)

Filtered by vendor Netiq Subscribe
Filtered by product Access Manager
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-14803 1 Netiq 1 Access Manager 2019-10-03 10.0 HIGH 9.8 CRITICAL
In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE11 where an attacker can execute arbitrary code on the system.
CVE-2018-1342 1 Netiq 1 Access Manager 2018-02-13 7.5 HIGH 9.8 CRITICAL
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.
CVE-2016-5757 1 Netiq 1 Access Manager 2017-03-24 7.5 HIGH 9.8 CRITICAL
iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame manipulation attacks, which could allow remote users to gain access to authentication credentials.