First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-38119

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Possible Reflected Cross-Site Scripting (XSS) Vulnerability

in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
OpenText	iManager	>= 3.0.0, <= 3.2.4.0000

References

https://www.netiq.com/documentation/imanager-32/imanager325_releasenotes/data/imanager325_releasenotes.htmlRelease Notes

Timeline

Published: Nov 22, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2021

CVE-2021-38126.1adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-381207.2A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup CVE-2021-381218.8Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed CVE-2021-381228.2A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive in CVE-2021-381236.1Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05 CVE-2021-381249.8Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5.CVE-2021-381259.8Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer version CVE-2021-381266.1Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The CVE-2021-381276.1Potential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security Manager, affecting versions 7.4.x and 7.5.x. The CVE-2021-381293.3Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. Th CVE-2021-38136.5Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.CVE-2021-381306.5A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1.

CVE-2021-38119: Medium severity, CVSS 6.1 | Vulnix