CVE-2017-7590 OpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by a crafted Managed Object Name.
MediumCVSS 6.1
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by a crafted Managed Object Name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openidm project openidm | <= 4.0.0 | No fix listed |
| openidm project openidm | = 4.5.0 | No fix listed |
References
- www.rootlabs.com.br exploit third-party-advisory
- 98044 vdb-entry
- backstage.forgerock.com mitigation third-party-advisory