Vulnerability Description
Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, via user.Context in the Object Selector, via vdtData in the Version discovery and via nextFrame in the Object Inspector and via Host GUID in the System details plugins.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netiq | Identity Manager | >= 2.7.7.7, < 4.6.1 |
Related Weaknesses (CWE)
References
- https://bugzilla.suse.com/show_bug.cgi?id=1033828
- https://www.novell.com/support/kb/doc.php?id=7021423
- https://bugzilla.suse.com/show_bug.cgi?id=1033828
- https://www.novell.com/support/kb/doc.php?id=7021423
FAQ
What is CVE-2017-7427?
CVE-2017-7427 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary J...
How severe is CVE-2017-7427?
CVE-2017-7427 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-7427?
Check the references section above for vendor advisories and patch information. Affected products include: Netiq Identity Manager.