CVE-2008-5095

Published: Nov 14, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected (5)

Products: Novell: Identity Manager Roles Based Provisioning Module, User Application

Novell

2 products

Identity Manager Roles Based Provisioning Module

User Application

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Novell Identity Manager Roles Based Provisioning Module	Version 3.6.0
Novell Identity Manager Roles Based Provisioning Module	Version 3.6.1
Novell User Application	Version 3.0.1
Novell User Application	Version 3.5.0
Novell User Application	Version 3.5.1