iManager

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

12critical5high4medium0low

updated 2026-10-27

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-38117US	critical9.8	1.14% (67th)	—	no fix	2024-11-22	≤ 3.0.0 ≤3.2.4.0000
CVE-2023-24467US	critical9.8	1.11% (66th)	—	no fix	2024-11-22	≤ 3.0.0 ≤3.2.6.0200
CVE-2024-3483US	critical9.8	0.98% (62nd)	—	no fix	2024-05-15	≤ 3.0.0 ≤3.2.6.0300
CVE-2024-3968US	critical9.8	0.68% (52nd)	—	no fix	2024-05-15	≤ 3.0.0 ≤3.2.6.0300
CVE-2024-3967US	critical9.8	0.64% (50th)	—	no fix	2024-05-15	≤ 3.0.0 ≤3.2.6.0300
CVE-2021-38116US	high8.8	0.62% (49th)	—	no fix	2024-11-22	≤ 3.0.0 ≤3.2.4.0000
CVE-2023-24466US	critical9.8	0.53% (45th)	—	no fix	2024-11-22	≤ 3.0.0 ≤3.2.6.0200
CVE-2024-3970US	high7.5	0.51% (43rd)	—	no fix	2024-05-15	≤ 3.0.0 ≤3.2.6.0300
CVE-2024-3484US	critical9.8	0.51% (43rd)	—	no fix	2024-05-15	≤ 3.0.0 ≤3.2.6.0300
CVE-2024-3969US	critical9.8	0.50% (43rd)	—	no fix	2024-05-28	≤ 3.0.0 ≤3.2.6.0300
CVE-2024-3486US	critical9.8	0.47% (41st)	—	no fix	2024-05-15	≤ 3.0.0 ≤3.2.6.0300
CVE-2021-38135US	critical9.8	0.45% (39th)	—	no fix	2024-11-22	≤ 3.0.0 ≤3.2.5.0000
CVE-2024-3487US	critical9.8	0.42% (36th)	—	no fix	2024-05-15	≤ 3.0.0 ≤3.2.6.0300
CVE-2024-3488US	critical9.8	0.37% (31st)	—	no fix	2024-05-15	≤ 3.0.0 ≤3.2.6.0300
CVE-2020-11859US	medium5.4	0.35% (29th)	—	<	2024-11-06	3.2.3 → <
CVE-2021-38119US	medium6.1	0.31% (24th)	—	no fix	2024-11-22	≤ 3.0.0 ≤3.2.4.0000
CVE-2021-38134US	medium6.1	0.29% (22nd)	—	no fix	2024-11-22	≤ 3.0.0 ≤3.2.5.0000
CVE-2022-26324US	medium5.4	0.29% (21st)	—	no fix	2024-11-22	≤ 3.0.0 ≤3.2.6.0000
CVE-2024-3485US	high7.5	0.26% (17th)	—	no fix	2024-05-15	≤ 3.0.0 ≤3.2.6.0300
CVE-2021-38118US	high7.8	0.21% (11th)	—	no fix	2024-11-22	≤ 3.0.0 ≤3.2.4.0000
CVE-2024-4429US	high7.4	0.18% (8th)	—	no fix	2024-05-28	≤ 3.0.0 ≤3.2.6.0300

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-611Improper Restriction of XML External Entity Reference3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)21 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan