Approved changes feed: RSS · Atom

cpe:2.3:a:netiq:access_manager:4.4:*:*:*:*:*:*:*

part: a version: 4.4 update: *

VendorNetiq (94dcefbc-5583-5ff9-9c13-e684dd17d831)
ProductAccess Manager (edb150f9-eb26-5022-ba2c-8858d01a415e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-7678 vulnerable 2026-06-03 14:39:07.172100 XSS vulnerability in NetIQ Access Manager (NAM) Admin Console component
LOW (3.5)
A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4.
Published: 2018-03-14T15:00:00.000Z
Updated: 2024-08-05T06:31:05.113Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7677 vulnerable 2026-06-03 14:39:07.170785 CSRF in NetIQ Access Manager (NAM) Identity Server component
LOW (3.5)
A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component.
Published: 2018-03-14T15:00:00.000Z
Updated: 2024-08-05T06:31:05.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1342 vulnerable 2026-06-03 14:38:31.024787 Details available
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.
Published: 2018-01-26T02:00:00.000Z
Updated: 2024-09-16T16:43:19.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14803 vulnerable 2026-06-03 14:36:44.797401 Details available
In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE11 where an attacker can execute arbitrary code on the system.
Published: 2018-01-20T00:00:00.000Z
Updated: 2024-09-16T23:06:39.488Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.