CVE-2021-38135

Possible External service interaction Vulnerability in OpenText iManager

State: Published
Severity: 8.6 High
Published: Nov 22, 2024
Updated: Nov 25, 2024
Reserved: Aug 4, 2021

Description

Possible External Service Interaction attack

in iManager has been discovered in OpenText™ iManager 3.2.6.0000.

Scores

CVSS	Score	Vector	Source
3.1	8.6 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N	OpenText

Weaknesses

CWE-918 Server-Side Request Forgery (SSRF)
CWE-406 Insufficient Control of Network Message Volume (Network Amplification)

Affected Products

Product	Versions
iManagerOpenText	3.0.0 through 3.2.5.0000Affected

References

https://www.netiq.com/documentation/imanager-32/imanager326_releasenotes/data/imanager326_releasenotes.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.