CVE-2018-0908

State: Published
Severity: Not scored
Published: Feb 26, 2018
Updated: Sep 16, 2024
Reserved: Dec 1, 2017

Description

Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted attribute value being displayed to a user on an affected MIM 2016 server, aka "Microsoft Identity Manager XSS Elevation of Privilege Vulnerability."

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Microsoft Identity ManagerMicrosoft Corporation	Microsoft Identity Manager 2016 SP1Affected

References

103112vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0908

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.