Unrated severityNVD Advisory· Published Jun 18, 2008· Updated Jun 16, 2026
CVE-2008-0925
CVE-2008-0925
Description
Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17cpe:2.3:a:novell:edirectory:8.7.3.9:*:linux:*:*:*:*:*+ 16 more
- cpe:2.3:a:novell:edirectory:8.7.3.9:*:linux:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.7.3.9:*:solaris:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2000:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2003:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8.1:*:linux:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8.1:*:solaris:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2000:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2003:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8.2:*:linux:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8.2:*:solaris:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2000:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2003:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8:*:linux:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8:*:solaris:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8:*:windows_2000:*:*:*:*:*
- cpe:2.3:a:novell:edirectory:8.8:*:windows_2003:*:*:*:*:*
- (no CPE)range: < 8.7.3 sp10, < 8.8.2 ftf2
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/30748nvdVendor Advisory
- securitytracker.com/idnvd
- support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.htmlnvd
- support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.htmlnvd
- www.novell.com/support/viewContent.donvd
- www.securityfocus.com/bid/29782nvd
- www.vupen.com/english/advisories/2008/1863/referencesnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/43151nvd
News mentions
0No linked articles in our index yet.