CVE-2004-0672

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-08-06 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.

Affected products

Netegrity Identityminder: web_5.6, web_5.6_sp1, web_5.6_sp2
Netegrity Policy Server: 5.5

References

http://marc.info/?l=bugtraq&m=108881203114336&w=2
http://www.securityfocus.com/bid/10645
https://exchange.xforce.ibmcloud.com/vulnerabilities/16618
http://marc.info/?l=bugtraq&m=108881203114336&w=2
http://www.securityfocus.com/bid/10645
https://exchange.xforce.ibmcloud.com/vulnerabilities/16618

Get alerted when CVE-2004-0672 or the next vulnerability affects your stack