CVE-2017-7426

iManager - XML External Entity vulnerabilities

Medium · published March 1, 2018

CVSS v3.0
5.4
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity (XXE) handling flaws that could be used by attackers to leak information or cause denial of service attacks.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01091 · 64.9th percentile
Published
2018-03-01T19:00Z
EPSS history
Timeline
  • 01 MAR 19:00Z
    iManager - XML External Entity vulnerabilities
    cvelistv5