Skip to content

CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-24466

Possible XML External Entity Injection in OpenText iManager

Read JSON ↗CVE.org ↗

Status: Published
Published: 2024-11-22
Updated: 2024-11-25
Assigning organization: OpenText

Description

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText iManager

Default version status: affected

3.0.0 to ≤ 3.2.6.0200affected

References

https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf ↗