CVE-2017-7426: iManager - XML External Entity vulnerabilities
Published Mar 1, 2018
·Updated
The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity (XXE) handling flaws that could be used by attackers to leak information or cause denial of service attacks.
Affected Software
1 affected component
NetIQ Identity Manager<4.6.1
Event History
Mar 1, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-7426?
CVE-2017-7426 has a severity score of 9.1, indicating it is critical.
2
How do I fix CVE-2017-7426?
To fix CVE-2017-7426, upgrade to NetIQ Identity Manager version 4.6.1 or later.
3
What are the potential impacts of CVE-2017-7426?
CVE-2017-7426 can lead to information leakage or denial of service attacks.
4
Which versions of NetIQ Identity Manager are affected by CVE-2017-7426?
CVE-2017-7426 affects all versions of NetIQ Identity Manager before 4.6.1.
5
What is the nature of the vulnerability in CVE-2017-7426?
CVE-2017-7426 is related to XML External Entity (XXE) handling flaws.