Identity Manager

identity_manager

Vendor: Novell • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-1598 1Novell 2Identity Manager Identity Manager Identity Applications May 6, 2026 Oct 27, 2016 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.
CVE-2010-4324 1Novell 2Identity Manager Identity Manager Roles Based Provisioning Module Apr 29, 2026 Jan 7, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitr...Show more Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2010-3264 1Novell 1Identity Manager Apr 29, 2026 Sep 8, 2010 N/A· v4 N/A· v3 2.1 LOW· v2 The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file.
CVE-2007-6625 1Novell 1Identity Manager Apr 23, 2026 Jan 4, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified network traffic that...Show more The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as demonstrated by a Nessus scan.Show less