Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-0672
HistoryAug 06, 2004 - 4:00 a.m.

CVE-2004-0672

2004-08-0604:00:00
[email protected]
web.nvd.nist.gov
22
cve-2004-0672
cross-site scripting
xss
netegrity identityminder
web edition
security vulnerabilities
remote code execution

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.

Affected configurations

NVD
Node
netegrityidentityminderMatchweb_5.6
OR
netegrityidentityminderMatchweb_5.6_sp1
OR
netegrityidentityminderMatchweb_5.6_sp2
OR
netegritypolicy_serverMatch5.5

Related

cvelist 1
nvd 1
cvelist
cvelist
CVE-2004-0672
2004-07-13 04:00:00
nvd
nvd
CVE-2004-0672
2004-08-06 04:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.4%

JSON
Related for CVE-2004-0672
cvelist1nvd1