Medium severity6.1NVD Advisory· Published Oct 27, 2016· Updated Jun 17, 2026

CVE-2015-0787

Description

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of the forgotUser.do CGI.

Affected products

Microfocus/Identity Manager
cpe:2.3:a:netiq:identity_manager:*:*:*:*:*:*:*:*
Range: <=4.5.2
Microfocus/Designer for Identity Managerllm-create
Range: <4.5.3

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/93972nvd
download.novell.com/Downloadnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000