Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 275

Export CSV
CVE-2021-22533

Possible Insertion of Sensitive Information into Log File Vulnerability

Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microfocus Opentext
Products
Edirectory Edirectory
CVE-2021-22532

Possible NLDAP Denial of Service attack Vulnerability

Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Edirectory
CVE-2021-38133

Possible Improper authentication Vulnerability in OpenText eDirectory

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Edirectory
CVE-2021-38132

Possible External service interaction Vulnerability

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microfocus Opentext
Products
Edirectory Edirectory
CVE-2021-38131

Cross-Site Scripting (XSS) Vulnerability

Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Edirectory
CVE-2021-22509

Handling of sensitive data in process memory in NetIQ Advance Authentication

A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user. The issue affects NetIQ Advance Authentication before 6.3.5.1

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Netiq Advanced Authentication
CVE-2021-38120

Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication

A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in provided command parameters. This issue affects NetIQ Advance Authentication version before 6.3.5.1.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Netiq Advanced Authentication
CVE-2021-38121

Weak communication protocol identified in Advance Authentication client application

Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices.  This issue affects NetIQ Advance Authentication versions before 6.3.5.1

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Netiq Advanced Authentication
CVE-2021-38122

Cross-Site Scripting (XSS) in Advance Authentication

A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This issue affects NetIQ Advance Authentication before 6.3.5.1

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Netiq Advanced Authentication
CVE-2021-22529

Sensitive Data Exposure leaks potential information in NetIQ Advance Authentication

A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue affects NetIQ Advance Authentication version before 6.3.5.1

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Netiq Advanced Authentication
CVE-2021-22530

Improper account management vulnerability in NetIQ Advance Authentication

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authentication before 6.3.5.1

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Netiq Advanced Authentication
CVE-2024-4556

Directory traversal vulnerability in NetIQ Access Manager

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Microfocus Netiq
Products
Netiq Access Manager Access Manager
CVE-2020-11846

Improper handling of token allows access to restricted resource in Privileged Access Manager

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Microfocus Opentext
Products
Netiq Privileged Access Manager Privileged Access Manager