Medium severity5.4NVD Advisory· Published Apr 22, 2016· Updated Jun 17, 2026
CVE-2016-1596
CVE-2016-1596
Description
Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a certain (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4) ta_selectedTopicContent, (5) tf_orgUnitName, (6) tf_aManufacturerFullName, (7) tf_aManufacturerName, (8) tf_aManufacturerAddress, or (9) tf_aManufacturerCity parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:novell:service_desk:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:novell:service_desk:*:*:*:*:*:*:*:*range: <=7.1
- (no CPE)range: <7.2
- Range: <7.2
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.