Possible External Service Interaction attack

in iManager has been discovered in OpenText™ iManager 3.2.6.0000.

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.

Possible improper input validation Vulnerability

in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

Possible Command injection Vulnerability

in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

Possible Elevation of Privilege Vulnerability

in iManager has been discovered in OpenText™ iManager. This impacts all versions before 3.2.5

Possible Reflected Cross-Site Scripting (XSS) Vulnerability

in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

Possible Command Injection

in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000.

Possible XML External Entity Injection

in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution.

Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypass authentication.

File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication.

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload

Path Traversal found in OpenText™ iManager 3.2.6.0200. This can lead to privilege escalation or file disclosure.

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure.

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command injection and insecure deserialization issues.

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java object deserialization.

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task.

Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory traversal.

Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3

Cross site scripting vulnerability in iManager prior to 3.1 SP2.