Medium 4.3

A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the...

CVE-2026-113383 First seen on SecPulse Oct 20, 20:17

Original description The description as published by the source.

A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pages/public/Login. Performing a manipulation of the argument tz results in cross site scripting. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.

Source: NIST National Vulnerability Database NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 4.3; CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Published: Oct 20, 2026
First seen on SecPulse: Oct 20, 20:17
GHSA: GHSA-w5c9-8gc4-7q4x
CWE: CWE-79 CWE-94

NVD GitHub Advisory

Tags(click for explanation)

Attack Types

Cross-Site Scripting

CWE

Cwe 79 Cwe 94

Detection sources

NIST National Vulnerability DatabaseOct 20, 23:16
GitHub Security Advisories (Global)Oct 20, 21:31