CVE-2013-1096

Novell Identity Manager Roles Based Provisioning Module 4.0.2 - Cross-Site Scripting via taskDetail taskId

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via a taskDetail taskId.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029532
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=819115
Various Sources x_refsource_confirm
http://download.novell.com/Download?buildid=dnDbmYe8PZc~

Scores

EPSS 0.0092
EPSS Percentile 76.2%

Details

CWE
CWE-79
Status published
Products (1)
novell/identity_manager_roles_based_provisioning_module 4.0.2
Published Dec 28, 2013
Tracked Since Feb 18, 2026