Netiq Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	36
Access Management Software	18
Directory Service Software	8
Hardware Driver Software	2
Reporting Software	2

Product

NetIQ Access Manager	18
NetIQ Identity Manager	10
NetIQ eDirectory	8
NetIQ Advanced Authentication	8
NetIQ Self Service Password Reset	2

Remediation

Official Fix	58
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	8

Exploitability

High	6
Functional	0
Proof-of-Concept	6
Unproven	0
Not Defined	54

Access Vector

Not Defined	0
Physical	2
Local	0
Adjacent	8
Network	56

Authentication

Not Defined	0
High	4
Low	18
None	44

User Interaction

Not Defined	0
Required	26
None	40

C3BM Index

CVSSv3 Base

≤1	0
≤2	2
≤3	2
≤4	2
≤5	16
≤6	16
≤7	16
≤8	10
≤9	2
≤10	0

CVSSv3 Temp

≤1	0
≤2	2
≤3	4
≤4	4
≤5	20
≤6	16
≤7	8
≤8	10
≤9	2
≤10	0

VulDB

≤1	0
≤2	2
≤3	4
≤4	4
≤5	16
≤6	18
≤7	16
≤8	6
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	10
≤7	20
≤8	2
≤9	2
≤10	12

CNA

≤1	0
≤2	0
≤3	8
≤4	2
≤5	0
≤6	4
≤7	0
≤8	2
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	24
<2k	36
<5k	6
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	66
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (25): Access Governance Suite (1), Access Manager (20), Account Manager (1), Advanced Authentication (4), Advanced Authentication Framework (1), Designer for Identity Manager (2), IDM Identity Applications (1), IDM ServiceNow Driver (1), Identity Manager (11), Identity Manager Oracle EBS Driver (1), Identity Manager Plugin (1), Identity Manager Plugins (1), Identity Reporting (1), NetIQ Access Manager (1), Privileged Account Manager (1), Pssecure (1), SENTINEL (1), Security Manager (1), Security Solutions for iSeries (1), Self Service Password Reset (1), Sentinel (1), Sentinel Server (2), WebTrends (1), eDirectory (5), iManager (3)

Link to Vendor Website: https://www.microfocus.com/netiq/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
03/16/2023	7.6	7.5	NetIQ Advanced Authentication access control	Unknown	Not Defined	Official Fix	0.00222	0.00	CVE-2023-24468
01/27/2023	5.2	5.2	NetIQ iManager cross site scripting	Unknown	Not Defined	Official Fix	0.00063	0.02	CVE-2022-38758
01/27/2023	1.8	1.8	NetIQ Identity Manager Plugin file information disclosure	Unknown	Not Defined	Official Fix	0.00063	0.00	CVE-2022-26329
11/29/2022	6.3	6.1	NetIQ Advanced Authentication Multi-Factor Authentication improper authentication	Unknown	Not Defined	Official Fix	0.00065	0.04	CVE-2022-38753
07/12/2021	2.6	2.5	NetIQ Advanced Authentication Multi-Factor Authentication improper authentication	Unknown	Not Defined	Official Fix	0.00054	0.00	CVE-2021-22515
04/13/2021	1.6	1.6	NetIQ Advanced Authentication user session	Unknown	Not Defined	Official Fix	0.00097	0.00	CVE-2021-22497
11/21/2020	7.6	7.3	NetIQ Identity Manager injection	Unknown	Not Defined	Official Fix	0.00259	0.00	CVE-2020-25839
07/10/2019	5.7	5.5	NetIQ Advanced Authentication Framework 7pk security	Unknown	Not Defined	Official Fix	0.00081	0.00	CVE-2019-11650
05/09/2019	6.4	6.1	NetIQ Identity Manager ServiceNow Driver information disclosure	Unknown	Not Defined	Official Fix	0.00168	0.03	CVE-2016-1600
04/26/2018	4.4	4.3	NetIQ Identity Reporting cross site scripting	Reporting Software	Not Defined	Official Fix	0.00079	0.04	CVE-2017-9275

55 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 55 results.

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!