Product by NetIQ

    NetIQ Identity Manager

    21 known vulnerabilities in NetIQ Identity Manager (NetIQ), 0 of them actively exploited (CISA KEV).

    Key figures

    21

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in NetIQ Identity Manager (NetIQ)
    HighCVE-2016-1600

    NetIQ Identity Manager: Information Disclosure

    also in 1 other product

    		7.5
    HighCVE-2017-9284

    IDM 4.6 Identity Applications information leakage

    		4.8
    CriticalCVE-2017-7426

    iManager - XML External Entity vulnerabilities

    		5.4
    HighCVE-2018-1348

    NetIQ Identity Manager SSL Renegotiation

    		5.3
    HighCVE-2017-9280

    NetIQ Identity Manager Applications: Use of HTTP Request With Sensitive Query String

    		4.3
    MediumCVE-2015-0787

    NetIQ Identity Manager: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2016-1592

    NetIQ Identity Manager: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2017-7427

    iManager - Multiple Reflected Cross-Site Scripting attacks

    		5.4
    HighCVE-2018-7673

    NetIQ Identity Manager DoS Attack

    		5.1
    MediumCVE-2018-7676

    IDM Information Leakage

    		3.9
    CriticalCVE-2017-9278

    Avoid password disclosure via EBS event logging in the iManager Oracle driver

    		3.3
    CriticalCVE-2017-7434

    NetIQ Identity Manager JDBC driver could leak passwords in exception traces

    		3.3
    HighCVE-2017-9279

    NetIQ Identity Manager allowed uploading of user icons with incorrect types or extensions

    		2.0
    MediumCVE-2018-1350

    NetIQ Identity Manager Driver Component Information Leakage

    		2.3
    MediumCVE-2018-1349

    NetIQ Identity Manager Driver Component Log File Information Leakage

    		2.3
    MediumCVE-2018-7674

    IDM URL Redirection attack

    		2.1
    MediumCVE-2022-26329

    File existence disclosue vulnerability in IDM plugin

    also in 1 other product

    		1.8
    Not ratedCVE-2006-4506

    NetIQ Identity Manager: security vulnerability

    		—
    Not ratedCVE-2006-4803

    NetIQ Identity Manager: Code Injection

    		—
    Not ratedCVE-2007-4526

    NetIQ Identity Manager: Information Disclosure

    also in 1 other product

    		—
    Not ratedCVE-2014-4509

    NetIQ Identity Manager: security vulnerability

    		—

    All products by NetIQ