CVEvulnerability
CVE-2008-5095
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected configurations
• novell identity manager roles based provisioning module 3.6.0
• novell identity manager roles based provisioning module 3.6.1
• novell user application 3.0.1
• novell user application 3.5.0
• novell user application 3.5.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.novell.com/support/viewContent.do?externalId=7001157&sliceId=1 Vendor Advisory
- http://www.securityfocus.com/bid/30947 www.securityfocus.com
- http://www.securitytracker.com/id?1020792 www.securitytracker.com
- http://www.securitytracker.com/id?1020793 www.securitytracker.com
- http://www.novell.com/support/viewContent.do?externalId=7001157&sliceId=1 Vendor Advisory
- http://www.securityfocus.com/bid/30947 www.securityfocus.com
- http://www.securitytracker.com/id?1020792 www.securitytracker.com
- http://www.securitytracker.com/id?1020793 www.securitytracker.com