CVE-2004-0672

Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.01% chance of exploitation in the next 30 days, 80th percentile

Published

2004-07-13

Updated

2024-08-08

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/24245
• https://www.exploit-db.com/exploits/24244

References

• CVE Record
• NVD entry

Related

• CVE-2004-0671
• CVE-2004-0673
• CVE-2004-0668
• CVE-2004-0675
• CVE-2004-0665
• CVE-2004-0676