OpenText iManager 3.2.6.0200 File Upload via Unauth Session
CVE-2024-3488 Published on May 15, 2024
File Upload vulnerability in unauthenticated session found in iManager.
File Upload vulnerability in unauthenticated
session found in OpenText iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a
file without authentication.
Vulnerability Analysis
Weakness Type
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Products Associated with CVE-2024-3488
Want to know whenever a new CVE is published for Micro Focus Imanager? stack.watch will email you.
Affected Versions
OpenText iManager:- Version 3.0.0, <= 3.2.6.0300 is affected.
- Version 3.0, <= 3.2.6.0300 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.