ED
Product
Edirectory
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 5Low 0
Watch
Add Edirectory to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-38132 | 9.8 | Sep 12 | Possible External service interaction Vulnerability Affected: before 9.2.6.0000 |
| CVE-2017-9285 | 9.8 | Mar 2 | NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services Affected: through 9.0 |
| CVE-2021-22533 | 9.1 | Sep 12 | Possible Insertion of Sensitive Information into Log File Vulnerability Affected: before 9.2.4.0000 |
| CVE-2017-7429 | 8.8 | Mar 2 | The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute… Affected: through 8.8.8 |
| CVE-2021-22532 | 7.5 | Sep 12 | Possible NLDAP Denial of Service attack Vulnerability Affected: before 9.2.4.0000 |
| CVE-2018-17950 | 7.5 | Dec 12 | Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2 Affected: through 9.1; 9.1 |
| CVE-2018-7686 | 7.5 | Aug 9 | Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage Affected: through 9.1.1 |
| CVE-2021-38133 | 6.5 | Sep 12 | Possible Improper authentication Vulnerability in OpenText eDirectory Affected: before 9.2.6.0000 |
| CVE-2021-22503 | 6.1 | Sep 12 | Improper Neutralization of Input During Web Page Generation Vulnerability Affected: before 9.2.3.0000 |
| CVE-2021-38131 | 6.1 | Sep 12 | Cross-Site Scripting (XSS) Vulnerability Affected: before 9.2.5.0000 |
| CVE-2018-17952 | 6.1 | Dec 12 | Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 Affected: before 9.1.2 |
| CVE-2018-7692 | 6.1 | Aug 9 | Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1 Affected: through 9.1.1 |
| CVE-2012-0432 | – | Dec 25 | Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors Affected: 8.8.7.0; 8.8.7.1 |
| CVE-2012-0430 | – | Dec 25 | Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass… Affected: 8.8.6.0; 8.8.6.1; 8.8.6.2; 8.8.6.3; 8.8.6.4; 8.8.6.5; +3 more |
| CVE-2012-0429 | – | Dec 25 | dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted… Affected: 8.8.6.0; 8.8.6.1; 8.8.6.2; 8.8.6.3; 8.8.6.4; 8.8.6.5; +3 more |
| CVE-2012-0428 | – | Dec 25 | Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via… Affected: 8.8.6.0; 8.8.6.1; 8.8.6.2; 8.8.6.3; 8.8.6.4; 8.8.6.5; +3 more |
Showing 16