CVE-2011-2227

CVE-2011-2227 describes a cross-site scripting (XSS) vulnerability in Novell Identity Manager (IDM) User Application (versions 3.5.0–4.0.0) and Identity Manager Roles Based Provisioning Module (versions 3.6.0–4.0.0). The flaw arises from accepting user-controlled input in the apwaDetail (aka apwa...