cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2010-0284,https://securityvulnerability.io/vulnerability/CVE-2010-0284,,"Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with any contents, and consequently execute arbitrary code, via a .. (dot dot) in a parameter, aka ZDI-CAN-678.",Novell,Access Manager,,,0.37582001090049744,false,false,false,false,,false,false,2010-06-18T16:00:00.000Z,0
CVE-2009-4879,https://securityvulnerability.io/vulnerability/CVE-2009-4879,,"The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.",Novell,Access Manager,,,0.001550000044517219,false,false,false,false,,false,false,2010-05-26T18:30:00.000Z,0
CVE-2009-4878,https://securityvulnerability.io/vulnerability/CVE-2009-4878,,Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors.,Novell,Access Manager,,,0.004310000222176313,false,false,false,false,,false,false,2010-05-26T18:00:00.000Z,0
CVE-2008-6722,https://securityvulnerability.io/vulnerability/CVE-2008-6722,,"Novell Access Manager 3 SP4 does not properly expire X.509 certificate sessions, which allows physically proximate attackers to obtain a logged-in session by using a victim's web-browser process that continues to send the original and valid SSL sessionID, related to inability of Apache Tomcat to clear entries from its SSL cache.",Novell,Access Manager,,,0.0020800000056624413,false,false,false,false,,false,false,2009-04-14T16:00:00.000Z,0
CVE-2007-3570,https://securityvulnerability.io/vulnerability/CVE-2007-3570,,The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security controls via Fullwidth/Halfwidth Unicode encoded data in a HTTP POST request.,Novell,Access Manager,,,0.015890000388026237,false,false,false,false,,false,false,2007-07-05T19:00:00.000Z,0
CVE-2007-1309,https://securityvulnerability.io/vulnerability/CVE-2007-1309,,"Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.",Novell,Access Manager,,,0.0026400000788271427,false,false,false,false,,false,false,2007-03-07T00:00:00.000Z,0
CVE-2007-0110,https://securityvulnerability.io/vulnerability/CVE-2007-0110,,"Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 allows remote attackers to inject arbitrary web script or HTML via the IssueInstant parameter, which is not properly handled in the resulting error message.",Novell,Access Manager Identity Server,,,0.030330000445246696,false,false,false,false,,false,false,2007-01-09T00:00:00.000Z,0