How severe is CVE-2018-1344?

CVE-2018-1344 has a CVSS 3.x base score of 3.1, rated low severity. It is exploitable over an adjacent network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2018-1344 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (55th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2018-1344?

CVE-2018-1344 affects Netiq Imanager. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2018-1344?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2018-1344 published?

CVE-2018-1344 was published on 2018-03-21 and last updated on 2026-06-17.

CVE-2018-1344

CVE-2018-1344 is a low-severity vulnerability in Netiq Imanager with a CVSS 3.x base score of 3.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 3.x base score 3.1)
CVSS v2: 5.0
EPSS exploit prediction: 1% (55th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Netiq Imanager
Published: 2018-03-21
Last modified: 2026-06-17

Description

Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1

Frequently asked questions

What is CVE-2018-1344?: Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1
How severe is CVE-2018-1344?: CVE-2018-1344 has a CVSS 3.x base score of 3.1, rated low severity. It is exploitable over an adjacent network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2018-1344 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (55th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2018-1344?: CVE-2018-1344 affects Netiq Imanager. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2018-1344?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2018-1344 published?: CVE-2018-1344 was published on 2018-03-21 and last updated on 2026-06-17.

References

https://www.netiq.com/documentation/imanager-31/imanager31_releasenotes/data/imanager31_releasenotes.html

Affected products (1)

cpe:2.3:a:netiq:imanager:*:*:*:*:*:*:*:*

More vulnerabilities in Netiq Imanager

CVE-2017-7432 — Critical (CVSS 9.8): Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload…
CVE-2017-7431 — High (CVSS 8.8): Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object…
CVE-2017-7425 — High (CVSS 7.6): Multiple potential reflected XSS issues exist in NetIQ iManager versions before 2.7.7 Patch 10 HF2 and 3.0.3.2.
CVE-2017-5186 — High (CVSS 7.5): Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch…
CVE-2022-38758 — High (CVSS 7.2): Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious…
CVE-2017-7430 — Medium (CVSS 6.1): Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS…

All CVEs affecting Netiq Imanager →