CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/09/2024 |
| CVE-2021-22532 | 高危7.5 | Possible NLDAP Denial of Service attack Vulnerability
in eDirectory has been discovered in
OpenText™
eDirectory before 9.2.4.0000. | 12/09/2024 |
| CVE-2021-22503 | 中危6.1 | Possible
Improper Neutralization of Input During Web Page Generation Vulnerability
in eDirectory has been discovered in
OpenText™ eDirectory 9.2.3.0000. | 12/09/2024 |
| CVE-2018-17952 | 中危6.1 | Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 | 12/12/2018 |
| CVE-2018-17950 | 高危7.5 | Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2 | 12/12/2018 |
| CVE-2018-7692 | 中危6.1 | Unvalidated redirect vulnerability in in NetIQ eDirectory before 9.1.1 HF1. | 09/08/2018 |
| CVE-2018-7686 | 高危7.5 | Information leakage vulnerability in NetIQ eDirectory before 9.1.1 HF1 due to shared memory usage. | 09/08/2018 |
| CVE-2017-9285 | 严重9.8 | NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services. | 02/03/2018 |
| CVE-2017-7429 | 高危8.8 | The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server. | 02/03/2018 |
| CVE-2012-0432 | 严重10.0 | Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors. | 25/12/2012 |
| CVE-2012-0430 | 中危6.4 | Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors. | 25/12/2012 |
| CVE-2012-0429 | 中危4.0 | dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request. | 25/12/2012 |
| CVE-2012-0428 | 中危4.3 | Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 25/12/2012 |