CVE-2004-2757
Novell iChain < 2.2 - Cross-Site Scripting via URL Parameter
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship (FCS) allows remote attackers to inject arbitrary web script or HTML via url parameter.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_confirm
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/10653
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/14873
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/9412
Scores
EPSS
0.0027
EPSS Percentile
50.5%
Details
CWE
CWE-79
Status
published
Products (1)
novell/ichain
< 2.2 (5 CPE variants)
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026