Lucene search

K
cvelistMitreCVELIST:CVE-2017-7591
HistoryApr 09, 2017 - 1:32 a.m.

CVE-2017-7591

2017-04-0901:32:00
mitre
www.cve.org
2
openidm
reflected cross-site scripting
admin ui

EPSS

0.001

Percentile

30.3%

OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by the _sortKeys parameter to the authzRoles script under managed/user/.

EPSS

0.001

Percentile

30.3%

Related for CVELIST:CVE-2017-7591