CVE-2018-25084: Ping Identity Self-Service Account Manager SSAMController.java cross site scripting
First published: Mon Apr 10 2023(Updated: )
A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2. Affected by this issue is some unknown functionality of the file src/main/java/com/unboundid/webapp/ssam/SSAMController.java. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.1.3 is able to address this issue. The patch is identified as f64b10d63bb19ca2228b0c2d561a1a6e5a3bf251. It is recommended to upgrade the affected component. VDB-225362 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pingidentity Self-service Account Manager | =1.1.2 | |
| =1.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-25084?
CVE-2018-25084 is a cross-site scripting vulnerability found in Ping Identity Self-Service Account Manager 1.1.2.
What is the severity of CVE-2018-25084?
CVE-2018-25084 has a severity level of 6.1, which is considered medium.
How does CVE-2018-25084 affect Ping Identity Self-Service Account Manager?
CVE-2018-25084 exposes some unknown functionality of the file SSAMController.java, leading to potential cross-site scripting attacks.
How can I fix CVE-2018-25084?
To fix CVE-2018-25084, it is recommended to update to a version of Ping Identity Self-Service Account Manager that is not affected by the vulnerability.
Where can I find more information about CVE-2018-25084?
More information about CVE-2018-25084 can be found at the following references: [Reference 1](https://vuldb.com/?id.225362), [Reference 2](https://vuldb.com/?ctiid.225362), and [Reference 3](https://github.com/pingidentity/ssam/commit/f64b10d63bb19ca2228b0c2d561a1a6e5a3bf251).
- collector/mitre-cve
- collector/nvd-index
- agent/references
- agent/author
- agent/type
- agent/first-publish-date
- agent/remedy
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/title
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- vendor/pingidentity
- canonical/pingidentity self-service account manager
- version/pingidentity self-service account manager/1.1.2