Lucene search

[email protected]CVE-2006-3818

HistoryAug 11, 2006 - 10:04 a.m.

CVE-2006-3818

2006-08-1110:04:00

[email protected]

web.nvd.nist.gov

cve

2006

3818

cross-site scripting

xss

novell

groupwise

webaccess

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%

JSON

Cross-site scripting (XSS) vulnerability in the login page in Novell GroupWise WebAccess 6.5 before 20060721 and WebAccess 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via the GWAP.version parameter.

Affected configurations

NVD

Node

novellgroupwise_webaccessMatch6.5

novellgroupwise_webaccessMatch7

CPENameOperatorVersion
novell:groupwise_webaccessnovell groupwise webaccesseq6.5
novell:groupwise_webaccessnovell groupwise webaccesseq7

CPE	Name	Operator	Version
novell:groupwise_webaccess	novell groupwise webaccess	eq	6.5
novell:groupwise_webaccess	novell groupwise webaccess	eq	7

References

secunia.com/advisories/21411

securitytracker.com/id?1016648

support.novell.com/cgi-bin/search/searchtid.cgi?/2974176.htm

www.securityfocus.com/bid/19297

www.vupen.com/english/advisories/2006/3098

exchange.xforce.ibmcloud.com/vulnerabilities/28210

secure-support.novell.com/KanisaPlatform/Publishing/228/3574517_f.SAL_Public.html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.0%

JSON

Related for CVE-2006-3818

cvelist1 nvd1