Lucene search

[email protected]CVE-2011-2227

HistoryOct 08, 2011 - 2:52 a.m.

CVE-2011-2227

2011-10-0802:52:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-2227

cross-site scripting

xss

novell identity manager

idm

user application

roles based provisioning module

bug 709603

nvd

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.2%

JSON

Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0, 3.6.1, 3.7.0, and 4.0.0, allows remote attackers to inject arbitrary web script or HTML via the apwaDetail (aka apwaDetailId) parameter, aka Bug 709603.

CPENameOperatorVersion
novell:identity_manager_roles_based_provisioning_modulenovell identity manager roles based provisioning moduleeq3.6.0
novell:identity_manager_roles_based_provisioning_modulenovell identity manager roles based provisioning moduleeq3.6.1
novell:identity_manager_roles_based_provisioning_modulenovell identity manager roles based provisioning moduleeq4.0.0
novell:identity_manager_roles_based_provisioning_modulenovell identity manager roles based provisioning moduleeq3.7.0
novell:identity_manager_user_applicationnovell identity manager user applicationeq3.5.1
novell:identity_manager_user_applicationnovell identity manager user applicationeq4.0.0
novell:identity_manager_user_applicationnovell identity manager user applicationeq3.6.0
novell:identity_manager_user_applicationnovell identity manager user applicationeq3.6.1
novell:identity_manager_user_applicationnovell identity manager user applicationeq3.5.0
novell:identity_manager_user_applicationnovell identity manager user applicationeq3.7.0

CPE	Name	Operator	Version
novell:identity_manager_roles_based_provisioning_module	novell identity manager roles based provisioning module	eq	3.6.0
novell:identity_manager_roles_based_provisioning_module	novell identity manager roles based provisioning module	eq	3.6.1
novell:identity_manager_roles_based_provisioning_module	novell identity manager roles based provisioning module	eq	4.0.0
novell:identity_manager_roles_based_provisioning_module	novell identity manager roles based provisioning module	eq	3.7.0
novell:identity_manager_user_application	novell identity manager user application	eq	3.5.1
novell:identity_manager_user_application	novell identity manager user application	eq	4.0.0
novell:identity_manager_user_application	novell identity manager user application	eq	3.6.0
novell:identity_manager_user_application	novell identity manager user application	eq	3.6.1
novell:identity_manager_user_application	novell identity manager user application	eq	3.5.0
novell:identity_manager_user_application	novell identity manager user application	eq	3.7.0

References

support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5111710.html

support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5111711.html

support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112230.html

support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112250.html

support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112270.html

support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5112271.html

www.securityfocus.com/bid/49935

www.securitytracker.com/id?1026138

bugzilla.novell.com/show_bug.cgi?id=709603

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.2%

JSON

Related for CVE-2011-2227

prion1 cvelist1