← All advisories

High severity7.5NVD Advisory· Published Nov 22, 2024· Updated Jun 17, 2026

CVE-2023-24466

CVE-2023-24466

Description

Possible XML External Entity Injection

in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.

Affected products

6

Opentext/iManagerllm-fuzzy2 versions
3.2.6.0200+ 1 more
- (no CPE)range: 3.2.6.0200
- (no CPE)range: 3.0.0
Microfocus/Imanager4 versions
cpe:2.3:a:microfocus:imanager:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:microfocus:imanager:*:*:*:*:*:*:*:*range: >=3.0,<3.2.6
- cpe:2.3:a:microfocus:imanager:3.2.6:-:*:*:*:*:*:*
- cpe:2.3:a:microfocus:imanager:3.2.6:patch1:*:*:*:*:*:*
- cpe:2.3:a:microfocus:imanager:3.2.6:patch2:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdfnvdRelease Notes

News mentions

0

No linked articles in our index yet.