Netiq 脆弱性

タイムライン

タイプ

Not Defined36
Access Management Software24
Directory Service Software6

製品

NetIQ Access Manager24
NetIQ Identity Manager12
NetIQ eDirectory6
NetIQ Advanced Authentication Framework2
NetIQ SENTINEL2

修復

Official Fix56
Temporary Fix0
Workaround0
Unavailable2
Not Defined8

悪用可能性

High4
Functional0
Proof-of-Concept6
Unproven4
Not Defined52

アクセスベクター

Not Defined0
Physical0
Local0
Adjacent4
Network62

認証

Not Defined0
High0
Low14
None52

ユーザー操作

Not Defined0
Required26
None40

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤514
≤620
≤718
≤812
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤520
≤616
≤714
≤810
≤92
≤100

VulDB

≤10
≤20
≤30
≤40
≤518
≤624
≤714
≤810
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤610
≤720
≤86
≤94
≤1010

CNA

≤10
≤20
≤38
≤40
≤50
≤66
≤70
≤82
≤90
≤100

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k14
<2k40
<5k12
<10k0
<25k0
<50k0
<100k0
≥100k0

本日のエクスプロイト

<1k66
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (25): Access Governance Suite (1), Access Manager (20), Account Manager (1), Advanced Authentication (4), Advanced Authentication Framework (1), Designer for Identity Manager (2), IDM Identity Applications (1), IDM ServiceNow Driver (1), Identity Manager (11), Identity Manager Oracle EBS Driver (1), Identity Manager Plugin (1), Identity Manager Plugins (1), Identity Reporting (1), NetIQ Access Manager (1), Privileged Account Manager (1), Pssecure (1), SENTINEL (1), Security Manager (1), Security Solutions for iSeries (1), Self Service Password Reset (1), Sentinel (1), Sentinel Server (2), WebTrends (1), eDirectory (5), iManager (3)

Link to Vendor Website: https://www.microfocus.com/netiq/

公開済みBaseTemp脆弱性Prod悪修復EPSSCTICVE
2023年03月16日7.67.5NetIQ Advanced Authentication 特権昇格未知Not DefinedOfficial Fix0.002220.00CVE-2023-24468
2023年01月27日5.25.2NetIQ iManager クロスサイトスクリプティング未知Not DefinedOfficial Fix0.000630.02CVE-2022-38758
2023年01月27日1.81.8NetIQ Identity Manager Plugin 情報の漏洩未知Not DefinedOfficial Fix0.000630.00CVE-2022-26329
2022年11月29日6.36.1NetIQ Advanced Authentication Multi-Factor Authentication 弱い認証未知Not DefinedOfficial Fix0.000650.05CVE-2022-38753
2021年07月12日2.62.5NetIQ Advanced Authentication Multi-Factor Authentication 弱い認証未知Not DefinedOfficial Fix0.000540.00CVE-2021-22515
2021年04月13日1.61.6NetIQ Advanced Authentication 特権昇格未知Not DefinedOfficial Fix0.000970.00CVE-2021-22497
2020年11月21日7.67.3NetIQ Identity Manager 特権昇格未知Not DefinedOfficial Fix0.002590.00CVE-2020-25839
2019年07月10日5.75.5NetIQ Advanced Authentication Framework 特権昇格未知Not DefinedOfficial Fix0.000810.00CVE-2019-11650
2019年05月09日6.46.1NetIQ Identity Manager ServiceNow Driver 情報の漏洩未知Not DefinedOfficial Fix0.001680.03CVE-2016-1600
2018年04月26日4.44.3NetIQ Identity Reporting クロスサイトスクリプティングReporting SoftwareNot DefinedOfficial Fix0.000790.04CVE-2017-9275

55 非表示のエントリあり

🔒 Login Required

You need to signup and login to see more of the remaining 55 results.

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!