CVE-2010-4324

no score yetEPSS 1.4%

Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2011-01-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

novell:identity_manager
novell:identity_manager_roles_based_provisioning_module

References

http://osvdb.org/70298
http://secunia.com/advisories/42819
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5085293.html
http://www.securityfocus.com/bid/45692
http://www.securitytracker.com/id?1024941

Check your stack JSON