CVE-2004-0672
N/A
N/A
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/10645
- http://marc.info/?l=bugtraq&m=108881203114336&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16618
References
- http://www.securityfocus.com/bid/10645
- http://marc.info/?l=bugtraq&m=108881203114336&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16618
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.