First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-26324

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
OpenText	iManager	>= 3.0.0, <= 3.2.6.0000

References

https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch1_releasenotes/imanager326_patch1_releasenotes.pdfRelease Notes

Timeline

Published: Nov 22, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-263256.1Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2 CVE-2022-263266.1Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2 CVE-2022-263275.1Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded CVE-2022-263282.0Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText Performance Center on CVE-2022-263295.3File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file CVE-2022-26338.2The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'd CVE-2022-263307.5Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in CVE-2022-263316.1Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in CVE-2022-263325.4Cipi 3.1.15 allows Add Server stored XSS via the /api/servers name field.CVE-2022-263347.5A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X CVE-2022-263357.5A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X CVE-2022-263365.5A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception. This package is use

CVE-2022-26324: Medium severity, CVSS 5.4 | Vulnix