microfocus identity manager vulnerabilities

Latest microfocus identity manager CVEs

Newest publication first

1. CVE-2020-25839 NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1.

   Published 2020-11-20

   Critical·CVSS 9.8 EPSS 1.2%

   NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1.

2. CVE-2020-11849 Elevation of privilege and unauthorized access in Micro Focus Identity Manager product

   Published 2020-07-08

   Critical·CVSS 9.8 EPSS 1.2%

   Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vulnerability could allow information exposure that can result in an elevation of privilege or an unauthorized access.

3. CVE-2016-1600 The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability.

   Published 2019-05-09

   High·CVSS 7.5 EPSS 1.1%

   The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.