Security Vulnerabilities - CVEs Published In 2024
Possible XSS in iManager URL for access Component has been discovered in
OpenText™ iManager 3.2.5.0000.
CVSS Score
6.1
EPSS Score
0.003
Published
2024-11-22
Possible
External Service Interaction attack
in iManager has been discovered in
OpenText™ iManager 3.2.6.0000.
CVSS Score
8.6
EPSS Score
0.004
Published
2024-11-22
Possible XSS in iManager URL for access Component has been discovered in
OpenText™ iManager 3.2.6.0000.
CVSS Score
7.6
EPSS Score
0.003
Published
2024-11-22
Possible XML External Entity Injection
in iManager GET parameter has been discovered in
OpenText™ iManager 3.2.6.0200.
CVSS Score
7.5
EPSS Score
0.005
Published
2024-11-22
Possible Command Injection
in iManager GET parameter has been discovered in
OpenText™ iManager 3.2.6.0000.
CVSS Score
8.8
EPSS Score
0.011
Published
2024-11-22
Possible Elevation of Privilege Vulnerability
in iManager has been discovered in
OpenText™ iManager. This impacts all versions before 3.2.5
CVSS Score
8.8
EPSS Score
0.006
Published
2024-11-22
Possible Command injection Vulnerability
in iManager has been discovered in
OpenText™ iManager 3.2.4.0000.
CVSS Score
8.8
EPSS Score
0.011
Published
2024-11-22
Possible improper input validation Vulnerability
in iManager has been discovered in
OpenText™ iManager 3.2.4.0000.
CVSS Score
5.5
EPSS Score
0.002
Published
2024-11-22
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score
4.3
EPSS Score
0.006
Published
2024-11-22
Inadequate Encryption Strength vulnerability in Apache Answer.
This issue affects Apache Answer: through 1.4.0.
The ids generated using the UUID v1 version are to some extent not secure enough. It can cause the generated token to be predictable.
Users are recommended to upgrade to version 1.4.1, which fixes the issue.
CVSS Score
2.6
EPSS Score
0.002
Published
2024-11-22