← Back to CVE List

CVE-2017-7591

Published: 2017-04-09T01:59Z
Last Modified: 2024-11-21T03:32Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by the _sortKeys parameter to the authzRoles script under managed/user/. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt