XSS in Novell Identity Manager Roles Based Provisioning Module
CVE-2008-5095
Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.012 (64.0th percentile) — read the EPSS interpretation.
Affected products
- Novell Identity_manager_roles_based_provisioning_module — versions 3.6.0, 3.6.1
- Novell User_application — versions 3.0.1, 3.5.0, 3.5.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)