CVE-2017-7591

OpenIDM versions 4.0.0 and 4.5.0 are affected by a reflected cross-site scripting (XSS) vulnerability in the Admin UI, reachable via the _sortKeys parameter to the authzRoles script under managed/user/. The root cause is an reflected XSS in the Admin UI input handling, enabling an attacker-suppli...