CVE-2017-7432

CRITICAL

Novell iManager <2.7 SP7 Patch 10 HF1 & NetIQ iManager <3.0.3.1 - W...

Title source: llm
STIX 2.1

Description

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.

References (5)

Core 5
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=1027619
Vendor Advisory x_refsource_confirm
https://www.novell.com/support/kb/doc.php?id=7010166
Various Sources x_refsource_confirm
https://dl.netiq.com/Download?buildid=24FxpmqdThE~
Various Sources x_refsource_confirm
https://www.netiq.com/support/kb/doc.php?id=7016795
Various Sources x_refsource_confirm
https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~

Scores

CVSS v3 9.8
EPSS 0.0109
EPSS Percentile 78.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (8)
n/a/Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1
netiq/imanager 3.0
netiq/imanager 3.0.1
netiq/imanager 3.0.2
netiq/imanager 3.0.2.1
netiq/imanager 3.0.3
netiq/imanager 3.0.3.1
novell/imanager 2.7 (22 CPE variants)
Published May 03, 2017
Tracked Since Feb 18, 2026