CVE-2017-7426medium

CVE-2017-7426: medium-severity vulnerability in NetIQ Identity Manager Plug-ins

iManager - XML External Entity vulnerabilities

Published · Updated

Follow this CVE+ Monitor Identity Manager Plug-ins

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 1.1%
The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity (XXE) handling flaws that could be used by attackers to leak information or cause denial of service attacks.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Affected products
NetIQ · Identity Manager Plug-ins