CVE-2008-5095
published 2008-11-14CVE-2008-5095: Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and…
PriorityP416medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.16%
63.5th percentile
Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| novell | identity_manager_roles_based_provisioning_module | — | — |
| novell | identity_manager_roles_based_provisioning_module | — | — |
| novell | user_application | — | — |
| novell | user_application | — | — |
| novell | user_application | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.novell.com/support/viewContent.do?externalId=7001157&sliceId=1http://www.securityfocus.com/bid/30947http://www.securitytracker.com/id?1020792http://www.securitytracker.com/id?1020793http://www.novell.com/support/viewContent.do?externalId=7001157&sliceId=1http://www.securityfocus.com/bid/30947http://www.securitytracker.com/id?1020792http://www.securitytracker.com/id?1020793
2008-11-14
Published