CVE-2016-1592

—

CVSS 3.0

6.1 medium

EPSS

<1%p53

Published

Oct 27, 2016 (Oct 27, 2016)

Modified

Jun 17, 2026

Description

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI.

Vendors: netiq
Products: identity manager
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.