CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-3486

XML External Entity injection vulnerability in iManager

Status: Published
Published: 2024-05-15
Updated: 2024-08-01
Assigning organization: OpenText

Description

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText iManager

Default version status: affected

3.0.0 to ≤ 3.2.6.0300affected

References

https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html ↗