← Back

CVE-2023-24466

nvd nist
Published: Nov 22, 2024Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.

Affected (4)

Products: Microfocus: Imanager
Microfocus
1 product
Imanager
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Microfocus
Imanager
From 3.0 to 3.2.6
Imanager
Version 3.2.6
Imanager
Version 3.2.6 patch1
Imanager
Version 3.2.6 patch2

Related CWEs

CWE-611
Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (1)

Source: security@opentext.com
Release Notes

Timeline

No history available yet.