CVE-2016-1598

Published: Oct 27, 2016Modified: May 6, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.

Affected (2)

Products: Novell: Identity Manager, Identity Manager Identity Applications

Novell

2 products

Identity Manager

Identity Manager Identity Applications

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Novell Identity Manager	Version 4.5
Novell Identity Manager Identity Applications	Up to 4.5.3

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

http://www.securityfocus.com/bid/93833

Source: security@opentext.com

https://download.novell.com/Download?buildid=xyswDCMsT7I~

Source: security@opentext.com

http://www.securityfocus.com/bid/93833

Source: af854a3a-2127-422b-91ae-364da2661108

https://download.novell.com/Download?buildid=xyswDCMsT7I~

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.