imanager vulnerabilities and fixes

Recent CVEs affecting imanager, with upgrade or downgrade steps. 12 tracked.

imanager has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2024-11-22. Highest priority: CVE-2023-24467 (score 47/100).

• CVE-2024-4429 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200
• CVE-2024-3969 HIGH 7.8 UPGRADE XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200
• CVE-2023-24467 HIGH 8.8 UPGRADE Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000.
• CVE-2023-24466 HIGH 7.5 UPGRADE Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager
• CVE-2022-26324 HIGH 7.6 DOWNGRADE Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.
• CVE-2021-38135 HIGH 8.6 UPGRADE Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.000
• CVE-2021-38134 MEDIUM 6.1 UPGRADE Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.
• CVE-2021-38119 MEDIUM 6.1 UPGRADE Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iMan
• CVE-2021-38118 MEDIUM 5.5 UPGRADE Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.
• CVE-2021-38117 HIGH 8.8 UPGRADE Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.
• CVE-2021-38116 HIGH 8.8 UPGRADE Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager
• CVE-2020-11859 HIGH 7.6 UPGRADE Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue aff

FAQ

How do I fix imanager vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is imanager being exploited right now?

None of the tracked imanager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which imanager CVE should I patch first?

CVE-2023-24467 currently ranks highest (47/100): Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000..

RSS feed for imanager · ← Back to latest CVEs