CVSS: 8.6EPSS: %CPEs: 1EXPL: 0CVE-2021-38135 – Possible External service interaction Vulnerability in OpenText iManager
https://notcve.org/view.php?id=CVE-2021-38135
Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000. • https://www.netiq.com/documentation/imanager-32/imanager326_releasenotes/data/imanager326_releasenotes.html • CWE-406: Insufficient Control of Network Message Volume (Network Amplification) CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 7.6EPSS: %CPEs: 1EXPL: 0CVE-2022-26324 – Possible XSS in iManager URL for access Component
https://notcve.org/view.php?id=CVE-2022-26324
Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000. • https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch1_releasenotes/imanager326_patch1_releasenotes.pdf • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: %CPEs: 1EXPL: 0CVE-2023-24466 – Possible XML External Entity Injection in OpenText iManager
https://notcve.org/view.php?id=CVE-2023-24466
Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200. • https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 8.8EPSS: %CPEs: 1EXPL: 0CVE-2023-24467 – Possible Command Injection in OpenText iManager
https://notcve.org/view.php?id=CVE-2023-24467
Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000. • https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-4429 – Cross Site Request Forgery vulnerability in iManager
https://notcve.org/view.php?id=CVE-2024-4429
Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information disclosure. Se ha descubierto una vulnerabilidad de Cross-Site Request Forgery en OpenText™ iManager 3.2.6.0200. Esto podría dar lugar a la divulgación de información confidencial. • https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html • CWE-352: Cross-Site Request Forgery (CSRF) •