CVE-2016-1598

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-1598
XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.

5.4 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector : AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

3.5 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://www.securityfocus.com/bid/93833
https://download.novell.com/Download?buildid=xyswDCMsT7I~
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:novell:identity_manager:4.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:identity_manager_identity_applications:*:*:*:*:*:*:*:*
History

07 Nov 2023, 02:30

Type Values Removed Values Added
References (CONFIRM) https://download.novell.com/Download?buildid=xyswDCMsT7I~ - Patch, Vendor Advisory () https://download.novell.com/Download?buildid=xyswDCMsT7I~ -
References (BID) http://www.securityfocus.com/bid/93833 - () http://www.securityfocus.com/bid/93833 -
Information

Published : 2016-10-27 20:59

Updated : 2023-11-07 02:30

NVD link : CVE-2016-1598

Mitre link : CVE-2016-1598

JSON object : View

Products Affected

novell

  • identity_manager_identity_applications
  • identity_manager
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')