CVE-2016-1592

6.1 mediumEPSS 0.8%

Medium (6.1) in netiq identity manager. EPSS 0.8% chance of exploitation in the next 30 days.

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI.

Severity

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2016-10-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19