CVE-2016-1596: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a certain (1) user name, (2) tfaClientFirstName, (3) tfaClientLastName, (4) taselectedTopicContent, (5) tforgUnitName, (6) tfaManufacturerFullName, (7) tfaManufacturerName, (8) tfaManufacturerAddress, or (9) tfaManufacturerCity parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1596?
CVE-2016-1596 is classified as a moderate severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2016-1596?
To fix CVE-2016-1596, upgrade to Novell Service Desk version 7.2 or later, which addresses these XSS vulnerabilities.
Who is affected by CVE-2016-1596?
CVE-2016-1596 affects all versions of Micro Focus Novell Service Desk prior to version 7.2.
What types of input are vulnerable in CVE-2016-1596?
The vulnerable inputs in CVE-2016-1596 include user name, client first name, client last name, selected topic content, and organization unit name.
Can CVE-2016-1596 be exploited by unauthenticated users?
No, CVE-2016-1596 can only be exploited by remote authenticated users.