Netiq Edirectory — known CVE vulnerabilities

Every CVE whose affected-product data names Netiq Edirectory, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2017-7429 — CVSS 8.8 (high): The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used…
• CVE-2017-5186 — CVSS 7.5 (high): Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and…
• CVE-2017-9285 — CVSS 5.4 (medium): NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory…
• CVE-2018-12461 — CVSS 3.5 (low): Fixed issues with NetIQ eDirectory prior to 9.1.1 when checking certificate revocation.
• CVE-2018-1346 — CVSS 3.1 (low): Addresses denial of service attack to eDirectory versions prior to 9.1.