CVE-2010-4324

EUVD-2010-4296
Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
Affected Products (NVD)
VendorProductVersion
novellidentity_manager
*
novellidentity_manager_roles_based_provisioning_module
𝑥
≤ 3.7.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/70298
http://secunia.com/advisories/42819
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5085293.html
http://www.securityfocus.com/bid/45692
http://www.securitytracker.com/id?1024941
http://www.vupen.com/english/advisories/2011/0038
https://bugzilla.novell.com/show_bug.cgi?id=653516
https://exchange.xforce.ibmcloud.com/vulnerabilities/64501
http://osvdb.org/70298
http://secunia.com/advisories/42819
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5085293.html
http://www.securityfocus.com/bid/45692
http://www.securitytracker.com/id?1024941
http://www.vupen.com/english/advisories/2011/0038
https://bugzilla.novell.com/show_bug.cgi?id=653516
https://exchange.xforce.ibmcloud.com/vulnerabilities/64501