CVE-2010-4324

2011-01-0718:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.5%

JSON

Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

osvdb.org/70298

secunia.com/advisories/42819

support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5085293.html

www.securityfocus.com/bid/45692

www.securitytracker.com/id?1024941

www.vupen.com/english/advisories/2011/0038

bugzilla.novell.com/show_bug.cgi?id=653516

exchange.xforce.ibmcloud.com/vulnerabilities/64501