VULNERABILITY INTELLIGENCE
CVE-2018-1342
CVSS score9.8 CRITICAL
EPSS probability1.17%
CISA KEVNot currently listed
Published2018-01-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.
Weakness classification
- CWE-434: Unrestricted Upload of File with Dangerous Type