CVEs (3)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Netiq 1Privileged Account Manager Nov 21, 2024 Mar 6, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 PAM exposure enabling unauthenticated access to remote host |
1Netiq 1Privileged Account Manager Nov 21, 2024 Mar 5, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via the "type" and "account" parameters of json requests. |
1Netiq 1Privileged Account Manager Nov 21, 2024 Mar 2, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via javascript DOM modification using the supplied cookie parameter. |