Persistent XSS Vulnerability in Novell and NetIQ iManager Products
CVE-2017-7430

6.1MEDIUM

Key Information:

Vendor: Novell
Status: Novell Imanager 2.7.x Before 2.7 Sp7 Patch 10 Hf1 And Netiq Imanager 3.x Before 3.0.3.1
Vendor: CVE Published:; 3 May 2017

What is CVE-2017-7430?

Novell iManager versions 2.7.x prior to 2.7 SP7 Patch 10 HF1 and NetIQ iManager versions 3.x prior to 3.0.3.1 are susceptible to a persistent Cross-Site Scripting (XSS) vulnerability in their Framework component. This flaw allows attackers to inject malicious scripts that can be executed in the context of the affected user’s session. The vulnerability poses significant risks to user data integrity and confidentiality. Organizations using these versions are strongly encouraged to apply the latest patches and updates to safeguard their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1