Netiq Advanced Authentication

netiq_advanced_authentication

Vendor: Microfocus • 11 CVEs

CVEs (11)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-38122 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Aug 28, 2024 N/A· v4 8.2 HIGH· v3 N/A· v2 A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This issue affects NetIQ Advance Authentication before 6.3.5.1
CVE-2021-38121 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Aug 28, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. This issue affects NetIQ Advance Authentication versions befo...Show more Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. This issue affects NetIQ Advance Authentication versions before 6.3.5.1Show less
CVE-2021-38120 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Aug 28, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in provided command parameters. This issue affects Net...Show more A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in provided command parameters. This issue affects NetIQ Advance Authentication version before 6.3.5.1.Show less
CVE-2021-22530 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Aug 28, 2024 N/A· v4 9.9 CRITICAL· v3 N/A· v2 A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may...Show more A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authentication before 6.3.5.1Show less
CVE-2021-22529 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Aug 28, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue affects NetIQ Advance Authentication version before 6.3.5.1
CVE-2021-22509 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Aug 28, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user. The issue affects NetIQ Advance Authentication before 6.3.5....Show more A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user. The issue affects NetIQ Advance Authentication before 6.3.5.1Show less
CVE-2023-24468 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Mar 15, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2
CVE-2022-38753 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Nov 28, 2022 N/A· v4 6.3 MEDIUM· v3 N/A· v2 This update resolves a multi-factor authentication bypass attack
CVE-2021-22515 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Jul 12, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1.
CVE-2021-22497 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Apr 12, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue.
CVE-2019-11650 1Microfocus 1Netiq Advanced Authentication Jun 17, 2026 Jul 10, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0.