Novell Identity Manager vulnerabilities

4 CVEs affecting Novell Identity Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1598, published 2016-10-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-6625, published 2008-01-04. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified…
CVE-2010-4324, published 2011-01-07. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote…
CVE-2016-1598, published 2016-10-27. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.
CVE-2010-3264, published 2010-09-08. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file.