CVE-2024-3969 — XML External Entity injection vulnerability in iManager

CVE-2024-3969

XML External Entity injection vulnerability in iManager PUBLISHED

Description (CNA)

XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload

Affected (CNA)

Vendor / product	Versions
OpenText / iManager	affected 3.0.0 through 3.2.6.0300

CWE

CWE-611

References

https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html

ADP enrichment

CVE

No English description supplied.

https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html

CISA-ADP

No English description supplied.

No references supplied.