cbcvebase.
CVE-2016-1598
published 2016-10-27

CVE-2016-1598: XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment…

medium5.4CVSS 3.0
AVNACLPRLUIRSCCLILAN
XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.

Affected

2 ranges
VendorProductVersion rangeFixed in
novellidentity_manager
novellidentity_manager_identity_applications<= 4.5.3