CVE-2016-1598 in IDM Identity Applications

Summary

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 01/12/2016
• Disclosure: 10/27/2016
• Moderation: VulDB entry created
• Entries: VDB-93134 (1)
• CPE: ready
• CWE: CWE-79 (Confirmed)
• CVSS: 5.4
• EPSS: 0.00274
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1598
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1598
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1598/