Unscored severity · published Dec 28, 2013
CVE-2013-1096
Cross-site scripting (XSS) vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell Identity Manager (aka IDM) allows remote attackers to inject…
–
CVSS
2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via a taskDetail taskId.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Identity Manager Roles Based Provisioning Module · Novell
4.0.2 · source: NVD
Affected product
IM
Identity Manager Roles Based Provisioning Module
Novell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1096
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1096
download.novell.com
http://download.novell.com/Download?buildid=dnDbmYe8PZc~
www.securitytracker.com
http://www.securitytracker.com/id/1029532
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=819115
More from Identity Manager Roles Based Provisioning Module
–
CVE-2013-1083
Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager (aka IDM) Roles Based Provisioning Module 4.0.2 before Field Patch C has…
–
CVE-2011-2227
Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based…
–
CVE-2011-1696
Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based…
–
CVE-2010-4324
Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM)…
–
CVE-2008-5095
Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote…