AM
Product
Access Manager
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 16Low 1
Watch
Add Access Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-7677 | 8.8 | Mar 14 | A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component Affected: 4.4 |
| CVE-2016-5758 | 8.8 | Mar 23 | A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high… Affected: 4.1; 4.1; 4.1; 4.2; 4.2 |
| CVE-2016-5750 | 8.8 | Mar 23 | The certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be used to upload JSP pages that would be executed as the… Affected: 4.1; 4.1; 4.1; 4.2; 4.2 |
| CVE-2024-4555 | 7.5 | Aug 28 | User impersonation with MFA when configure in specific way Affected: before 5.0.4.1; before 5.1 |
| CVE-2024-4556 | 7.5 | Aug 28 | Directory traversal vulnerability in NetIQ Access Manager Affected: before 5.0.4.1; before 5.1 |
| CVE-2016-5754 | 7.5 | Mar 23 | Presence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before SP2 Affected: 4.1; 4.1; 4.1; 4.2; 4.2 |
| CVE-2016-5752 | 7.5 | Mar 23 | The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handling unsigned SAML requests incorrectly, leaking results to a… Affected: 4.1; 4.1; 4.1; 4.2; 4.2 |
Showing 7