← All advisories

Medium severity6.1NVD Advisory· Published Oct 27, 2016· Updated Jun 17, 2026

CVE-2016-1592

CVE-2016-1592

Description

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI.

Affected products

2

Microfocus/Identity Manager
cpe:2.3:a:netiq:identity_manager:*:*:*:*:*:*:*:*
Range: <=4.5.2
Microfocus/Designer for Identity Managerllm-create
Range: <4.5.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.