CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/09/2024 |
| CVE-2021-22532 | HOCH7.5 | Possible NLDAP Denial of Service attack Vulnerability
in eDirectory has been discovered in
OpenText™
eDirectory before 9.2.4.0000. | 12/09/2024 |
| CVE-2021-22503 | MITTEL6.1 | Possible
Improper Neutralization of Input During Web Page Generation Vulnerability
in eDirectory has been discovered in
OpenText™ eDirectory 9.2.3.0000. | 12/09/2024 |
| CVE-2018-17952 | MITTEL6.1 | Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 | 12/12/2018 |
| CVE-2018-17950 | HOCH7.5 | Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2 | 12/12/2018 |
| CVE-2018-7692 | MITTEL6.1 | Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1. | 09/08/2018 |
| CVE-2018-7686 | HOCH7.5 | Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage. | 09/08/2018 |
| CVE-2017-9285 | KRITISCH9.8 | NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services. | 02/03/2018 |
| CVE-2017-7429 | HOCH8.8 | The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server. | 02/03/2018 |
| CVE-2012-0432 | KRITISCH10.0 | Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors. | 25/12/2012 |
| CVE-2012-0430 | MITTEL6.4 | Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors. | 25/12/2012 |
| CVE-2012-0429 | MITTEL4.0 | dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request. | 25/12/2012 |
| CVE-2012-0428 | MITTEL4.3 | Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 25/12/2012 |