What’s Vulnerable › Vulnerabilities

CVE-2017-7426: iManager - XML External Entity vulnerabilities

• Severity: critical (CVSS 9.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-01 · updated 2026-06-17
• Weakness: CWE-611

Description

The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity (XXE) handling flaws that could be used by attackers to leak information or cause denial of service attacks.

Affected products

• NetIQ Identity Manager: before 4.6.1 — fixed in 4.6.1

How to fix

Upgrade to a fixed version: NetIQ Identity Manager 4.6.1. Check the vendor advisory for mitigations.

References

• https://www.novell.com/support/kb/doc.php?id=7021173
• https://www.novell.com/support/kb/doc.php?id=7021173

Get alerted when CVE-2017-7426 or the next vulnerability affects your stack