| Package | Affected versions | Patched versions |
|---|---|---|
| edirectory | ≤ 8.8.8 | |
| edirectory | = 8.8.8 |
The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free