EUVD-2017-16596

Malware in sbrugna...

CVE-2017-7591

OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting XSS attacks within the Admin UI, as demonstrated by the sortKeys parameter to the authzRoles script under managed/user/...

Cross site scripting

OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting XSS attacks within the Admin UI, as demonstrated by the sortKeys parameter to the authzRoles script under managed/user/...

CVE-2017-7591: Improper Neutralization of Input During Web Page Generation

OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting XSS attacks within the Admin UI, as demonstrated by the sortKeys parameter to the authzRoles script under managed/user/...

PT-2017-17822

Name of the Vulnerable Software and Affected Versions OpenIDM versions prior to 4.0.1 and 4.5.1 Description The issue allows for reflected cross-site scripting XSS attacks within the Admin UI. This can be demonstrated by exploiting the sortKeys parameter to the authzRoles script under the...