VulnerabilityModified

CVE-2020-17465

Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS.

MEDIUM 6.1EPSS 0.72%

Does this matter?

Lower severity and a low EPSS score (0.72%). Track it; it rarely justifies an emergency change on its own.

Description

Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS. The vulnerability affects versions 6.5.0.4, 6.0.0.6.

CVSS 3.1: 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS: 0.72% probability · 52th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: forgerock/identity manager
Source: cve@mitre.org

References

https://gist.github.com/gajendkmr/261f45e06c41656131a651c920c7f406Third Party Advisory
https://www.nccgroup.com/us/our-research/?research=Technical+advisoriesThird Party Advisory
https://gist.github.com/gajendkmr/261f45e06c41656131a651c920c7f406Third Party Advisory
https://www.nccgroup.com/us/our-research/?research=Technical+advisoriesThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.