CVE-2016-1598

N/A

Descricao

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado10/27/2016

Ultima modificacao4/12/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

novell:identity_managernovell:identity_manager_identity_applications

Fraquezas (CWE)

CWE-79

Referencias

http://www.securityfocus.com/bid/93833(security@opentext.com)

https://download.novell.com/Download?buildid=xyswDCMsT7I~(security@opentext.com)

http://www.securityfocus.com/bid/93833(af854a3a-2127-422b-91ae-364da2661108)

https://download.novell.com/Download?buildid=xyswDCMsT7I~(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.