CVE-2010-4324: XSS
Published Jan 7, 2011
·Updated
Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
2 affected components
Novell Identity Manager Roles Based Provisioning Module<=3.7.0
Novell Identity Manager
Event History
Jan 7, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4324?
CVE-2010-4324 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2010-4324?
To fix CVE-2010-4324, upgrade to Novell Identity Manager Roles Based Provisioning Module version 3.7.0 or later.
3
What systems are affected by CVE-2010-4324?
CVE-2010-4324 affects Novell Identity Manager Roles Based Provisioning Module versions prior to 3.7.0.
4
What type of vulnerability is CVE-2010-4324?
CVE-2010-4324 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2010-4324 be exploited remotely?
Yes, CVE-2010-4324 can be exploited remotely by attackers injecting arbitrary web scripts or HTML.