Known Vulnerabilities for Edirectory by Novell

Listed below are 10 of the newest known vulnerabilities associated with "Edirectory" by "Novell".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2017-9277 The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open conn... 7.5 - HIGH 2018-03-02 2023-11-07
CVE-2017-9267 In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers... 7.5 - HIGH 2018-03-02 2023-11-07
CVE-2017-5186 Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hot... 7.5 - HIGH 2017-04-27 2023-11-07
CVE-2016-9168 A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote... 6.5 - MEDIUM 2017-03-23 2023-11-07
CVE-2016-9167 NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which co... 7.5 - HIGH 2017-03-23 2023-11-07
CVE-2016-5747 A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 allows... 7.5 - HIGH 2017-03-23 2023-11-07
CVE-2014-5213 nds/files/opt/novell/eDirectory/lib64/ndsimon/public/images in iMonitor in Novell eDirectory before 8.8 SP8 Patch 4 allows re... 4 - MEDIUM 2014-12-19 2015-11-13
CVE-2014-5212 Cross-site scripting (XSS) vulnerability in nds/search/data in iMonitor in Novell eDirectory before 8.8 SP8 Patch 4 allows re... 4.3 - MEDIUM 2014-12-19 2015-11-13
CVE-2010-4327 Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 before 8.8.5.6 and 8.8.6 before 8.8.6.2 allows remote... 5 - MEDIUM 2011-02-10 2018-10-10
CVE-2010-0666 Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial... 5 - MEDIUM 2010-02-19 2010-02-22
Results limited to 10 most recent vulnerabilities

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationNovellEdirectory85.30AllAllAll
ApplicationNovellEdirectory85.24AllAllAll
ApplicationNovellEdirectory85.20AllAllAll
ApplicationNovellEdirectory8.8.3AllAllAll
ApplicationNovellEdirectory8.8.1AllAllAll
ApplicationNovellEdirectory8.8sp8AllAll
ApplicationNovellEdirectory8.8sp2windowsAll
ApplicationNovellEdirectory8.8AllAllAll
ApplicationNovellEdirectory8.7.3.8AllAllAll
ApplicationNovellEdirectory8.7.3.10AllAllAll
ApplicationNovellEdirectory8.7.3sp5windowsAll
ApplicationNovellEdirectory8.7.3sp9windowsAll
ApplicationNovellEdirectory8.7.3sp8windowsAll
ApplicationNovellEdirectory8.7.3sp7windowsAll
ApplicationNovellEdirectory8.7.3sp6windowsAll
ApplicationNovellEdirectory8.7.3sp4windowsAll
ApplicationNovellEdirectory8.7.3sp3windowsAll
ApplicationNovellEdirectory8.7.3sp2windowsAll
ApplicationNovellEdirectory8.7.3sp1windowsAll
ApplicationNovellEdirectory8.7.3AllAllAll
Results limited to 20 most recent known configurations
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report