CVE-2012-0428 Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microfocus edirectory | = 8.8.6.0 | No fix listed |
| microfocus edirectory | = 8.8.6.1 | No fix listed |
| microfocus edirectory | = 8.8.6.2 | No fix listed |
| microfocus edirectory | = 8.8.6.3 | No fix listed |
| microfocus edirectory | = 8.8.6.4 | No fix listed |
| microfocus edirectory | = 8.8.6.5 | No fix listed |
| microfocus edirectory | = 8.8.6.6 | No fix listed |
| microfocus edirectory | = 8.8.7.0 | No fix listed |
| microfocus edirectory | = 8.8.7.1 | No fix listed |
References
- www.novell.com
- www.novell.com vendor-advisory
- 1027911 vdb-entry
- bugzilla.novell.com