Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:netiq_access_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductNetiq Access Manager (182a1374-fb67-50cf-91d4-ebde783a1608)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22531 vulnerable 2026-06-08 05:30:00.808571 Details available
A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0
Published: 2022-05-12T18:52:38.000Z
Updated: 2024-08-03T18:44:14.026Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5758 vulnerable 2026-06-08 05:07:57.691278 Details available
A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high load.
Published: 2017-03-23T06:36:00.000Z
Updated: 2024-08-06T01:15:10.652Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5757 vulnerable 2026-06-08 05:07:57.690915 Details available
iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame manipulation attacks, which could allow remote users to gain access to authentication credentials.
Published: 2017-03-23T06:36:00.000Z
Updated: 2024-08-06T01:15:10.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5756 vulnerable 2026-06-08 05:07:57.690561 Details available
Multiple components of the web tools in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 were vulnerable to Reflected Cross Site Scripting attacks which could be used to hijack user sessions: nps/servlet/frameservice, nps/servlet/webacc, roma/admin/cntl, roma/jsp/admin/appliance/devicedetail_edit.jsp, roma/jsp/admin/managementip/mgmt_ip_details_frameset.jsp, roma/jsp/admin/managementip/mgmt_ip_details_middleframe.jsp, roma/jsp/volsc/monitoring/appliance.jsp, and roma/jsp/volsc/monitoring/graph.jsp.
Published: 2017-03-23T06:36:00.000Z
Updated: 2024-08-06T01:15:10.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5755 vulnerable 2026-06-08 05:07:57.690187 Details available
NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to clickjacking attacks due to a missing SAMEORIGIN filter in the "high encryption" setting.
Published: 2017-03-23T06:36:00.000Z
Updated: 2024-08-06T01:15:09.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5754 vulnerable 2026-06-08 05:07:57.689822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5752 vulnerable 2026-06-08 05:07:57.689464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5751 vulnerable 2026-06-08 05:07:57.689068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5749 vulnerable 2026-06-08 05:07:57.686675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5748 vulnerable 2026-06-08 05:07:57.683033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.