CVE-2004-0672

Netegrity IdentityMinder Web Edition 5.6 - XSS

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.

Exploits (2)

exploitdb WORKING POC VERIFIED
by [email protected] · textwebappscgi
https://www.exploit-db.com/exploits/24244
exploitdb WRITEUP VERIFIED
by [email protected] · textwebappscgi
https://www.exploit-db.com/exploits/24245

References (3)

Core 3
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10645
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=108881203114336&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16618

Scores

EPSS 0.0048
EPSS Percentile 65.1%

Details

Status published
Products (4)
netegrity/identityminder web_5.6
netegrity/identityminder web_5.6_sp1
netegrity/identityminder web_5.6_sp2
netegrity/policy_server 5.5
Published Aug 06, 2004
Tracked Since Feb 18, 2026