CVE-2004-0672: Netegrity Identityminder

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.

Affected products

• Netegrity Identityminder: version web_5.6 only; version web_5.6_sp1 only; version web_5.6_sp2 only
• Netegrity Policy Server: version 5.5 only

Published 2004-08-06. Last modified 2026-06-16.