Medium severity5.4NVD Advisory· Published Oct 27, 2016· Updated Jun 17, 2026

CVE-2016-1598

Description

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.

Affected products

Novell/Identity Manager
cpe:2.3:a:novell:identity_manager:4.5:*:*:*:*:*:*:*
Novell/Identity Manager Identity Applications
cpe:2.3:a:novell:identity_manager_identity_applications:*:*:*:*:*:*:*:*
Range: <=4.5.3
Microfocus/IDM Identity Applicationsllm-create
Range: <4.5.4

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/93833nvd
download.novell.com/Downloadnvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000