Unrated severityNVD Advisory· Published Jan 9, 2007· Updated Jun 16, 2026

CVE-2007-0110

Description

Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 allows remote attackers to inject arbitrary web script or HTML via the IssueInstant parameter, which is not properly handled in the resulting error message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Novell/Access Manager Identity Server2 versions
cpe:2.3:a:novell:access_manager_identity_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:novell:access_manager_identity_server:*:*:*:*:*:*:*:*range: <=3
- (no CPE)range: < 3.0.0-1013

Patches

Vulnerability mechanics

References

secure-support.novell.com/KanisaPlatform/Publishing/143/3615264_f.SAL_Public.htmlnvdVendor Advisory
osvdb.org/31359nvd
secunia.com/advisories/23654nvd
securitytracker.com/idnvd
www.securityfocus.com/bid/21921nvd
www.vupen.com/english/advisories/2007/0073nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000