CVE-2008-5095 Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject....
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell identity manager roles based provisioning module | = 3.6.0 | No fix listed |
| novell identity manager roles based provisioning module | = 3.6.1 | No fix listed |
| novell user application | = 3.0.1 | No fix listed |
| novell user application | = 3.5.0 | No fix listed |
| novell user application | = 3.5.1 | No fix listed |
References
- www.novell.com vendor-advisory
- 30947 vdb-entry
- 1020792 vdb-entry
- 1020793 vdb-entry