CVE-2017-7427: Improper Neutralization of Input During Web Page Generation

Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector,...

PT-2018-8376

Name of the Vulnerable Software and Affected Versions iManager version 2.7.7.7 Identity Manager versions prior to 4.6.1 Description The issue allows for multiple cross-site scripting attacks in certain scenarios, enabling the execution of arbitrary JavaScript code in the context of the vulnerable...