CVE-2018-0908

Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted attribute value being…

published February 26, 2018

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted attribute value being displayed to a user on an affected MIM 2016 server, aka "Microsoft Identity Manager XSS Elevation of Privilege Vulnerability."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02421 · 84.0th percentile
Published
2018-02-26T22:00Z
EPSS history
Timeline
  • 26 FEB 22:00Z
    Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted attribute value being…
    cvelistv5