Filtered by vendor Microfocus Subscriptions
Filtered by product Imanager Subscriptions
Total 13 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-3486 1 Microfocus 1 Imanager 2025-01-21 7.8 High
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution.
CVE-2024-3487 1 Microfocus 1 Imanager 2025-01-21 3.5 Low
Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypass authentication.
CVE-2024-3488 1 Microfocus 1 Imanager 2025-01-21 5.6 Medium
File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication.
CVE-2024-3969 1 Microfocus 1 Imanager 2025-01-21 7.8 High
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload
CVE-2024-4429 1 Microfocus 1 Imanager 2025-01-21 5.4 Medium
Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information disclosure.
CVE-2024-3484 1 Microfocus 1 Imanager 2025-01-21 5.7 Medium
Path Traversal found in OpenText™ iManager 3.2.6.0200. This can lead to privilege escalation or file disclosure.
CVE-2024-3485 1 Microfocus 1 Imanager 2025-01-21 5.3 Medium
Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure.
CVE-2024-3483 1 Microfocus 1 Imanager 2025-01-21 7.8 High
Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command injection and insecure deserialization issues.
CVE-2024-3967 1 Microfocus 1 Imanager 2025-01-21 7.6 High
Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java object deserialization.
CVE-2024-3968 1 Microfocus 1 Imanager 2025-01-21 7.8 High
Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task.
CVE-2024-3970 1 Microfocus 1 Imanager 2025-01-21 5.3 Medium
Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory traversal.
CVE-2018-17949 1 Microfocus 1 Imanager 2024-11-21 N/A
Cross site scripting vulnerability in iManager prior to 3.1 SP2.
CVE-2020-11859 1 Microfocus 1 Imanager 2024-11-08 7.6 High
Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3