imanager vulnerabilities
4 known vulnerabilities in imanager from Micro Focus. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
iManager: Improper Restriction of XML External Entity Reference
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload
- 9.8 Critical severity
iManager: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication.
- 9.8 Critical severity
iManager: Improper Authentication
Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypass authentication.
- 9.8 Critical severity
iManager: Improper Neutralization of Special Elements used in a Command
Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command injection and insecure deserialization issues.