CVE-2017-7431: Netiq Imanager

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.

Affected products

• Netiq Imanager: version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.2.1 only; version 3.0.3 only; version 3.0.3.1 only
• Novell Imanager: version 2.7 only

Published 2017-05-03. Last modified 2026-06-17.