Approved changes feed: RSS · Atom

cpe:2.3:a:opentext:netiq_identity_console:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOpentext (5717091c-f148-5db6-be32-940ef0cdacf9)
ProductNetiq Identity Console (7cfa1b9a-46b4-5882-b1ca-c44ac50632f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-7240 vulnerable 2026-06-03 14:54:00.272579 Broken Access Control leading to SSRF in NetIQ Identity Console
MEDIUM (5.8)
 An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server (Server IP/DNS field) and is triggering connection to arbitrary address.
Published: 2024-05-07T13:11:23.031Z
Updated: 2024-08-02T08:57:35.206Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.