CVE-2018-25084: Ping Identity Self-Service Account Manager SSAMController.java cross site scripting
A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2. Affected by this issue is some unknown functionality of the file src/main/java/com/unboundid/webapp/ssam/SSAMController.java. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.1.3 is able to address this issue. The patch is identified as f64b10d63bb19ca2228b0c2d561a1a6e5a3bf251. It is recommended to upgrade the affected component. VDB-225362 is the identifier assigned to this vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-25084?
CVE-2018-25084 is a cross-site scripting vulnerability found in Ping Identity Self-Service Account Manager 1.1.2.
What is the severity of CVE-2018-25084?
CVE-2018-25084 has a severity level of 6.1, which is considered medium.
How does CVE-2018-25084 affect Ping Identity Self-Service Account Manager?
CVE-2018-25084 exposes some unknown functionality of the file SSAMController.java, leading to potential cross-site scripting attacks.
How can I fix CVE-2018-25084?
To fix CVE-2018-25084, it is recommended to update to a version of Ping Identity Self-Service Account Manager that is not affected by the vulnerability.
Where can I find more information about CVE-2018-25084?
More information about CVE-2018-25084 can be found at the following references: [Reference 1](https://vuldb.com/?id.225362), [Reference 2](https://vuldb.com/?ctiid.225362), and [Reference 3](https://github.com/pingidentity/ssam/commit/f64b10d63bb19ca2228b0c2d561a1a6e5a3bf251).