PT-2017-17730 · Netiq · Netiq Imanager

Published 2017-11-06 · Updated 2019-10-09 · CVE-2017-7425

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetIQ iManager versions prior to 2.7.7 Patch 10 HF2 NetIQ iManager versions prior to 3.0.3.2

Description Multiple potential reflected XSS issues exist.

Recommendations For versions prior to 2.7.7 Patch 10 HF2, update to version 2.7.7 Patch 10 HF2 or later. For versions prior to 3.0.3.2, update to version 3.0.3.2 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-7425

Affected Products

Netiq Imanager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-7425 · Security Note
• https://osv.dev/vulnerability/CVE-2017-7425 · Vendor Advisory
• https://netiq.com/documentation/imanager/imanager27710hf2readme/data/imanager27710hf2readme.html · Note
• https://novell.com/support/kb/doc.php?id=7016795 · Note
• https://novell.com/support/kb/doc.php?id=7021423 · Note
• https://netiq.com/documentation/imanager-3/imanager3032_releasenotes/data/imanager3032_releasenotes.html · Note