CVE-2004-0672 | BDVDB-2026-6597 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/10645
http://marc.info/?l=bugtraq&m=108881203114336&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/16618

Exploit#

No public exploit known

History#

Version 12004-07-13Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.