Unrated severityNVD Advisory· Published Dec 28, 2013· Updated Jun 16, 2026

CVE-2013-1096

Description

Cross-site scripting (XSS) vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via a taskDetail taskId.

Affected products

Novell/Identity Manager Roles Based Provisioning Module
cpe:2.3:a:novell:identity_manager_roles_based_provisioning_module:4.0.2:*:*:*:*:*:*:*
Novell/Identity Managerllm-fuzzy
Range: 4.0.2 before Field Patch D

Patches

Vulnerability mechanics

References

download.novell.com/Downloadnvd
www.securitytracker.com/id/1029532nvd
bugzilla.novell.com/show_bug.cginvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000