CVE-2011-2227

Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity…

published October 8, 2011

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0, 3.6.1, 3.7.0, and 4.0.0, allows remote attackers to inject arbitrary web script or HTML via the apwaDetail (aka apwaDetailId) parameter, aka Bug 709603.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01705 · 77.0th percentile
Published
2011-10-08T01:00Z
EPSS history
Timeline
  • 08 OCT 01:00Z
    Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity…
    cvelistv5