CVE-2014-5214: nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x befor...

Security readout for executives and security teams

CVE-2014-5214 is an authenticated file-read issue in NetIQ Access Manager 4.x Administration Console/iManager. A user with the novlwww role could abuse XML processing to read arbitrary server files. Business risk depends on whether the administration console is reachable and who has authenticated access. Exposure is most likely in organizations still running NetIQ Access Manager 4.x before 4.0.1 HF3, especially where the Administration Console is network-reachable and novlwww-authenticated users exist. Prioritize remediation where NAM Administration Console is reachable by broad internal networks or external paths. Treat as high urgency for legacy NAM deployments because arbitrary file reads can expose credentials, configuration, or sensitive operational data. Mitigation focus: Apply NetIQ/Novell guidance and update NAM to 4.0.1 HF3 or later.; Restrict Administration Console access to trusted administrative networks.; Review and minimize accounts with novlwww-authenticated access..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.