CVE-2013-1096

Novell IDM <4.0.2 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via a taskDetail taskId.

Scores

EPSS 0.0200
EPSS Percentile 83.5%

Details

CWE
CWE-79
Status published
Products (2)
novell/identity_manager_roles_based_provisioning_module
n/a/n/a
Published Dec 28, 2013
Tracked Since Feb 18, 2026