CVE-2008-0925

published 2008-06-18

CVE-2008-0925: Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."

Affected

4 ranges

Vendor	Product	Version range	Fixed in
novell	edirectory	—	—
novell	edirectory	—	—
novell	edirectory	—	—
novell	edirectory	—	—

CWE-79