CVE-2013-1096

CVE-2013-1096 affects Novell Identity Manager’s Roles Based Provisioning Module 4.0.2 prior to Field Patch D. The vulnerability is a reflected cross‑site scripting (XSS) in which improper handling of the taskId input to the taskDetail.do script allows an attacker to inject arbitrary script in a u...