Product by NetIQ

    NetIQ Access Manager

    24 known vulnerabilities in NetIQ Access Manager (NetIQ), 0 of them actively exploited (CISA KEV).

    Key figures

    24

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in NetIQ Access Manager (NetIQ)
    CriticalCVE-2017-14803

    Micro Focus NetIQ Access Manager: Code Execution

    also in 1 other product

    		9.8
    CriticalCVE-2016-5757

    NetIQ Access Manager: security vulnerability

    		9.8
    CriticalCVE-2018-1342

    NetIQ Access Manager: security vulnerability

    also in 1 other product

    		9.8
    HighCVE-2016-5750

    NetIQ iManager: Code Execution

    		8.8
    HighCVE-2016-5752

    NetIQ Access Manager: security vulnerability

    		7.5
    HighCVE-2016-5754

    NetIQ Access Manager: security vulnerability

    		7.5
    HighCVE-2016-5758

    NetIQ Access Manager: Cross-Site Request Forgery (CSRF)

    		8.8
    MediumCVE-2017-14802

    Unvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLs

    		5.4
    MediumCVE-2016-5751

    NetIQ Access Manager: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2017-5191

    NetIQ Access Manager 4.2 and NetIQ Access Manager 4.3: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2017-5183

    Identity Server: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2017-9276

    XSS Vulnerability in iManager

    		5.4
    MediumCVE-2020-11843

    Potential information leakage in administrator enabled debug mode

    also in 1 other product

    		6.5
    MediumCVE-2016-5756

    NetIQ Access Manager: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2017-14800

    Reflected xss on Access Manager iManager UI

    		5.4
    MediumCVE-2016-5755

    NetIQ Access Manager: Clickjacking

    		6.5
    MediumCVE-2017-7419

    NetIQ Access Manager OAuth Consent screen XSS attack

    		4.6
    MediumCVE-2017-14801

    Reflected xss in Admin Console REST interface

    		4.6
    MediumCVE-2017-14799

    XSS Vulnerability with ESP URL

    		4.6
    LowCVE-2017-5190

    NAM Identity Server and SAML2 Service Provider: Information Disclosure

    		3.1
    MediumCVE-2018-7678

    XSS vulnerability in NetIQ Access Manager (NAM) Admin Console component

    		3.5
    MediumCVE-2016-5749

    NetIQ Access Manager: XML External Entity (XXE)

    		5.5
    MediumCVE-2016-5748

    NetIQ Access Manager: XML External Entity (XXE)

    		5.5
    HighCVE-2018-7677

    CSRF in NetIQ Access Manager (NAM) Identity Server component

    		3.5

    All products by NetIQ