Cross site scripting

2008-11-1419:20:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

JSON

Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CPENameOperatorVersion
identity_manager_roles_based_provisioning_moduleeq3.6.0
identity_manager_roles_based_provisioning_moduleeq3.6.1
user_applicationeq3.0.1
user_applicationeq3.5.1
user_applicationeq3.5.0

Name	Operator	Version
identity_manager_roles_based_provisioning_module	eq	3.6.0
identity_manager_roles_based_provisioning_module	eq	3.6.1
user_application	eq	3.0.1
user_application	eq	3.5.1
user_application	eq	3.5.0