Skip to content
OpenAdvisories
Unscored CVE-2018-0908 EUVD-2018-1699GHSA-hmrw-vxq7-7hqj

Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted a…

Published Feb 26, 2018 · Updated Sep 16, 2024 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Identity Manager

Description

Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted attribute value being displayed to a user on an affected MIM 2016 server, aka "Microsoft Identity Manager XSS Elevation of Privilege Vulnerability."

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Identity Manager Microsoft Identity Manager 2016 SP1 —

References