Back to Database
Status published
High
CVE-2017-7425
Multiple Reflected XSS in iManager
Vulnerability Description
Multiple potential reflected XSS issues exist in NetIQ iManager versions before 2.7.7 Patch 10 HF2 and 3.0.3.2.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-7425
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Special thanks is given to Pawel.Batunek@ingservicespolska.pl for finding and reporting this issue as part of the responsible disclosure process..
References
- https://www.novell.com/support/kb/doc.php?id=7016795
- https://www.netiq.com/documentation/imanager-3/imanager3032_releasenotes/data/imanager3032_releasenotes.html
- https://www.novell.com/support/kb/doc.php?id=7021423
- https://www.netiq.com/documentation/imanager/imanager27710hf2readme/data/imanager27710hf2readme.html
More from NetIQ Corporation
View All →Affected Vendor
NetIQ Corporation
View all reports →Affected Software
NetIQ iManager
Vulnerable Versions:
2.7.7 Patch 10 HF2, 3.0.3.2
Timeline
Official Publish:
November 6th, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.