This script is Copyright (C) 2014-2015 Tenable Network Security, Inc.
An application on the remote host is affected by a cross-site scripting
According to its version, the Novell Identity Manager Roles Based
Provisioning Module install hosted on the remote web server is affected
by a reflected cross-site scripting vulnerability. This is due to
improper handling of user input to the 'taskId' parameter in the
'taskDetail.do' script. By tricking a user into clicking a specially
crafted URL, an attacker may be able to execute arbitrary script code in
a user's web browser in the security context of the affected
See also :
Apply Novell Identity Manager Roles Based Provisioning Module 4.0.2
Field Patch D.
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.7
Public Exploit Available : true