CVE-2017-7426

9.1 criticalEPSS 1.1%

Critical (9.1) in netiq identity manager. EPSS 1.1% chance of exploitation in the next 30 days.

The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity (XXE) handling flaws that could be used by attackers to leak information or cause denial of service attacks.

Severity

CVSS 3.0

9.1 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2018-03-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netiq:identity_manager

References

https://www.novell.com/support/kb/doc.php?id=7021173
https://www.novell.com/support/kb/doc.php?id=7021173

Check your stack JSON