by Kastro
Paper/Archive/CVE-2020-25839

CVE-2020-25839

microfocus — NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability.

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.0.680 × 2013.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1.

Affected

ProductAffectedFixed inSource
NetIQ Identity ManagerAll versions in the 4.8 line prior to version 4.8 Service Pack 2 HotFix 1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refnetiq.com/documentation/identity-manager-48/releasenotes_idm4821_apps/data/releasenotes_idm4821_apps.html