Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
eferences: - https://www.fortiguard.com/zeroday/FG-VD-21-029 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38101 State: PUBLISHED Published: 2021-10-01T22:51:18 Last Updated: 2024-08-04T01:30:09.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CPT file. This is different from CVE-2021-38099. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-028 - http
Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-028 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38102 State: PUBLISHED Published: 2021-10-01T22:57:46 Last Updated: 2024-08-04T01:30:09.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file. This is different from CVE-2021-38105. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-035 - https://ww
ional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-035 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38103 State: PUBLISHED Published: 2021-10-01T18:08:53 Last Updated: 2024-08-04T01:30:09.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-031 - https://www.fortinet.com/blog/threat-research/for
ainer: References: - https://www.fortiguard.com/zeroday/FG-VD-21-031 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38104 State: PUBLISHED Published: 2021-10-01T18:07:16 Last Updated: 2024-08-04T01:30:09.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPPP72.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-032 - https://www.fortinet.com/blog/threat-research/for
ainer: References: - https://www.fortiguard.com/zeroday/FG-VD-21-032 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38105 State: PUBLISHED Published: 2021-10-01T23:00:52 Last Updated: 2024-08-04T01:30:09.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file. This is different from CVE-2021-38102. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-033 - https://ww
ional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-033 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38106 State: PUBLISHED Published: 2021-10-01T22:56:22 Last Updated: 2024-08-04T01:30:09.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PPT file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-034 - https://www.fortinet.com/blog/threat-research/for
ainer: References: - https://www.fortiguard.com/zeroday/FG-VD-21-034 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38107 State: PUBLISHED Published: 2021-10-01T23:17:32 Last Updated: 2024-08-04T01:30:09.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CDR file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-039 - https://www.fortinet.com/blog/threat-research/for
ainer: References: - https://www.fortiguard.com/zeroday/FG-VD-21-039 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38108 State: PUBLISHED Published: 2021-10-01T23:13:12 Last Updated: 2024-08-04T01:30:09.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious DOC file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-037 - https://www.fortinet.com/blog/threat-resea
am Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-037 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38109 State: PUBLISHED Published: 2021-10-01T23:15:16 Last Updated: 2024-08-04T01:30:09.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CDR file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-038 - https://www.fortinet.com/blog/threat-research/fortinet-security-
es: - https://www.fortiguard.com/zeroday/FG-VD-21-038 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38110 State: PUBLISHED Published: 2021-10-01T22:59:25 Last Updated: 2024-08-04T01:30:09.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious DOC file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-036 - https://www.fortinet.com/blog/threat-resea
am Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-036 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38111 State: PUBLISHED Published: 2021-08-04T00:00:00.000Z Last Updated: 2025-05-05T16:46:25.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DEF CON 27 badge allows remote attackers to exploit a buffer overflow by sending an oversized packet via the NFMI (Near Field Magnetic Induction) protocol. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://defcon.org/html/defcon-29/dc-29-speakers.html#kintigh - https://github.com/skintigh/defcon27_badge_sdr
CVE ID: CVE-2021-38112 State: PUBLISHED Published: 2021-09-22T01:54:48 Last Updated: 2024-08-04T01:30:09.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF) --gpu-launcher argument. This is fixed in 3.1.9. Additional Analyst Notes: - CVE Program Container: References: - https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-windows-client.html#windows-release-notes - https://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce/
CVE ID: CVE-2021-38113 State: PUBLISHED Published: 2021-08-04T18:42:07 Last Updated: 2024-08-04T01:30:09.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: In addBouquet in js/bqe.js in OpenWebif (aka e2openplugin-OpenWebif) through 1.4.7, inserting JavaScript into the Add Bouquet feature of the Bouquet Editor (i.e., bouqueteditor/api/addbouquet?name=) leads to Stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/1387
CVE ID: CVE-2021-38114 State: PUBLISHED Published: 2021-08-04T20:15:32 Last Updated: 2024-08-04T01:30:09.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/7150f9575671f898382c370acae35f9087a30ba1 - https://patchwork.ffmpeg.org/project/ffmpeg/patch/PAXP193MB12624C21AE412BE95BA4D4A4B6F09%40PAXP193MB1262.EURP193.PROD.OUTLOOK.COM/ - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990 - https
tps://lists.debian.org/debian-lts-announce/2021/08/msg00018.html - https://www.debian.org/security/2021/dsa-4990 - https://www.debian.org/security/2021/dsa-4998
CVE ID: CVE-2021-38115 State: PUBLISHED Published: 2021-08-04T00:00:00 Last Updated: 2024-08-04T01:30:09.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libgd/libgd/issues/697 - https://github.com/libgd/libgd/pull/711/commits/8b111b2b4a4842179be66db68d84dda91a246032 - https://lists.debian.org/debian-lts-announce/2024/04/msg00003.html
CVE ID: CVE-2021-38116 State: PUBLISHED Published: 2024-11-22T15:34:43.211Z Last Updated: 2024-11-25T18:09:04.657Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenText Products: iManager Problem Types: CWE-77 Description: Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. This impacts all versions before 3.2.5 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/imanager325_releasenotes/data/imanager325_releasenotes.html
CVE ID: CVE-2021-38117 State: PUBLISHED Published: 2024-11-22T15:34:41.566Z Last Updated: 2024-11-25T18:10:33.565Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenText Products: iManager Problem Types: CWE-94 Description: Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/imanager325_releasenotes/data/imanager325_releasenotes.html
CVE ID: CVE-2021-38118 State: PUBLISHED Published: 2024-11-22T15:34:40.183Z Last Updated: 2024-11-26T14:19:33.603Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenText Products: iManager Problem Types: CWE-250 Description: Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/imanager325_releasenotes/data/imanager325_releasenotes.html
CVE ID: CVE-2021-38119 State: PUBLISHED Published: 2024-11-22T15:34:38.178Z Last Updated: 2024-11-26T14:19:46.120Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: OpenText Products: iManager Problem Types: CWE-79 Description: Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/imanager325_releasenotes/data/imanager325_releasenotes.html
CVE ID: CVE-2021-38120 State: PUBLISHED Published: 2024-08-28T06:28:55.684Z Last Updated: 2024-08-28T13:32:17.979Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L) Vendors: OpenText Products: NetIQ Advance Authentication Problem Types: CWE-77 Description: A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in provided command parameters. This issue affects NetIQ Advance Authentication version before 6.3.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/advanced-authentication-63/advanced-authenticatio
SA ADP Vulnrichment: References: - https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html
CVE ID: CVE-2021-38121 State: PUBLISHED Published: 2024-08-28T06:28:43.452Z Last Updated: 2024-08-28T13:29:45.226Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: OpenText Products: NetIQ Advance Authentication Problem Types: CWE-326 Description: Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. This issue affects NetIQ Advance Authentication versions before 6.3.5.1 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authent
//www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html
CVE ID: CVE-2021-38122 State: PUBLISHED Published: 2024-08-28T06:28:29.654Z Last Updated: 2024-08-28T13:32:46.172Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N) Vendors: OpenText Products: NetIQ Advance Authentication Problem Types: CWE-20 Description: A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This issue affects NetIQ Advance Authentication before 6.3.5.1 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-release
/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html
CVE ID: CVE-2021-38123 State: PUBLISHED Published: 2021-09-07T16:48:24 Last Updated: 2024-08-04T01:30:09.045Z Vendors: n/a Products: Network Automation. Problem Types: Open Redirect. Description: Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication. Additional Analyst Notes: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000001673
CVE ID: CVE-2021-38124 State: PUBLISHED Published: 2021-09-28T13:56:04 Last Updated: 2024-08-04T01:30:09.145Z Vendors: n/a Products: ArcSight Enterprise Security Manager (ESM). Problem Types: Remote Code Execution. Description: Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000001960
CVE ID: CVE-2021-38125 State: PUBLISHED Published: 2022-04-11T19:37:49 Last Updated: 2024-08-04T01:30:09.154Z Vendors: n/a Products: Operations Bridge containerized. Problem Types: Unauthenticated remote code execution. Description: Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer versions of Micro Focus Operations Bridge containerized if the deployment was upgraded from 2021.05 or 2021.08. The vulnerability could be exploited to unauthenticated remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000005303?language=en_US
CVE ID: CVE-2021-38126 State: PUBLISHED Published: 2022-01-14T19:11:32 Last Updated: 2024-08-04T01:30:09.253Z Vendors: n/a Products: ArcSight Enterprise Security Manager (ESM) Problem Types: Cross-Site Scripting (XSS). Description: Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000003453?language=en_US
CVE ID: CVE-2021-38127 State: PUBLISHED Published: 2022-01-14T19:11:33 Last Updated: 2024-08-04T01:30:09.219Z Vendors: n/a Products: ArcSight Enterprise Security Manager (ESM) Problem Types: Cross-Site Scripting (XSS). Description: Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000003453?language=en_US
CVE ID: CVE-2021-38129 State: PUBLISHED Published: 2022-01-25T19:11:07 Last Updated: 2024-08-04T01:30:09.084Z Vendors: n/a Products: Micro Focus Operations Agent. Problem Types: Escalation of privileges. Description: Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability could be exploited by a non-privileged local user to access system monitoring data collected by Operations Agent. Additional Analyst Notes: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000003539?language=en_US
CVE ID: CVE-2021-38130 State: PUBLISHED Published: 2022-02-04T22:29:22 Last Updated: 2024-08-04T01:37:15.994Z Vendors: n/a Products: Voltage SecureMail Mail Relay. Problem Types: Information leakage. Description: A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack. Additional Analyst Notes: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000003667
CVE ID: CVE-2021-38131 State: PUBLISHED Published: 2024-09-12T12:42:36.704Z Last Updated: 2024-09-12T12:57:07.117Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: OpenText Products: eDirectory Problem Types: CWE-79 Description: Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/edirectory-92/edirectory926_releasenotes/data/edirectory926_releasenotes.html
CVE ID: CVE-2021-38132 State: PUBLISHED Published: 2024-09-12T12:42:19.675Z Last Updated: 2024-09-12T13:05:51.351Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenText Products: eDirectory Problem Types: CWE-918 Description: Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/edirectory-92/edirectory926_releasenotes/data/edirectory926_releasenotes.html
CVE ID: CVE-2021-38133 State: PUBLISHED Published: 2024-09-12T12:41:46.807Z Last Updated: 2024-09-12T12:58:13.205Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: OpenText Products: eDirectory Problem Types: CWE-521 Description: Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/edirectory-92/edirectory926_releasenotes/data/edirectory926_releasenotes.html
CVE ID: CVE-2021-38134 State: PUBLISHED Published: 2024-11-22T15:34:36.023Z Last Updated: 2024-11-26T14:19:55.618Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: OpenText Products: iManager Problem Types: CWE-79 Description: Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/imanager326_releasenotes/data/imanager326_releasenotes.html
CVE ID: CVE-2021-38135 State: PUBLISHED Published: 2024-11-22T15:34:34.561Z Last Updated: 2024-11-25T18:11:18.827Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: OpenText Products: iManager Problem Types: CWE-918, CWE-406 Description: Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/imanager326_releasenotes/data/imanager326_releasenotes.html