Approved changes feed: RSS · Atom

cpe:2.3:a:netiq:access_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetiq (94dcefbc-5583-5ff9-9c13-e684dd17d831)
ProductAccess Manager (edb150f9-eb26-5022-ba2c-8858d01a415e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4556 vulnerable 2026-06-08 06:50:18.131394 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4555 vulnerable 2026-06-08 06:50:18.129627 User impersonation with MFA when configure in specific way
HIGH (7.7)
Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1
Published: 2024-08-28T06:27:21.348Z
Updated: 2025-10-06T13:30:22.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4554 vulnerable 2026-06-08 06:50:18.127008 Multiple xss vulnerability in NetIQ Access Manager
HIGH (7.3)
Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects Access Manager before 5.0.4.1 and 5.1.
Published: 2024-08-28T06:27:31.937Z
Updated: 2025-10-06T13:30:05.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11843 vulnerable 2026-06-08 05:17:54.947696 Potential information leakage in administrator enabled debug mode
MEDIUM (6.5)
This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before
Published: 2024-06-11T07:23:38.502Z
Updated: 2024-08-04T11:42:00.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9276 vulnerable 2026-06-08 05:10:09.559832 XSS Vulnerability in iManager
MEDIUM (5.4)
Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the "a" parameter.
Published: 2018-03-02T20:00:00.000Z
Updated: 2024-09-17T03:48:57.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7419 vulnerable 2026-06-08 05:09:55.896300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14802 vulnerable 2026-06-08 05:08:57.461546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14801 vulnerable 2026-06-08 05:08:57.461234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14800 vulnerable 2026-06-08 05:08:57.460905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14799 vulnerable 2026-06-08 05:08:57.460521 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.