Skip to content
OpenAdvisories

Archive

2 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /2 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.3
    CVE-2017-7434

    NetIQ Identity Manager JDBC driver could leak passwords in exception traces

    In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwords being logged into exception logfiles.

    NetIQ Identity Manager
  • Low 3.3
    CVE-2017-9278

    Avoid password disclosure via EBS event logging in the iManager Oracle driver

    The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables.

    NetIQ Identity Manager Oracle EBS driver
  • Low 2.0
    CVE-2017-9279

    NetIQ Identity Manager allowed uploading of user icons with incorrect types or extensions

    NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users.

    NetIQ Identity Manager