PT-2013-2872

CVE-2013-1096

Published

2013-12-28

Updated

2015-07-29

CVSS 2.0

4.3

Medium

MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Novell Identity Manager versions 4.0.2 before Field Patch D

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via a taskId in the taskDetail.

Recommendations For versions 4.0.2 before Field Patch D, apply Field Patch D to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾