Lucene search

[email protected]CVE-2009-1762

HistoryMay 22, 2009 - 4:48 p.m.

CVE-2009-1762

2009-05-2216:48:42

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-1762

cross-site scripting

xss

webaccess

novell groupwise

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the (1) GWAP.version or (2) User.Theme (aka User.Theme.index) parameter.

Affected configurations

NVD

Node

novellgroupwiseMatch7.0

novellgroupwiseMatch7.0sp1

novellgroupwiseMatch7.0sp2

novellgroupwiseMatch7.0sp3

novellgroupwiseMatch7.0.0sp1

novellgroupwiseMatch7.0.0sp2

novellgroupwiseMatch7.0.2

novellgroupwiseMatch7.0.3

novellgroupwiseMatch7.01

novellgroupwiseMatch7.02x

novellgroupwiseMatch7.03

novellgroupwiseMatch7.03hp1a

novellgroupwiseMatch7.03hp2

CPENameOperatorVersion
novell:groupwisenovell groupwiseeq7.0
novell:groupwisenovell groupwiseeq7.0.0
novell:groupwisenovell groupwiseeq7.0.2
novell:groupwisenovell groupwiseeq7.0.3
novell:groupwisenovell groupwiseeq7.01
novell:groupwisenovell groupwiseeq7.02x
novell:groupwisenovell groupwiseeq7.03

CPE	Name	Operator	Version
novell:groupwise	novell groupwise	eq	7.0
novell:groupwise	novell groupwise	eq	7.0.0
novell:groupwise	novell groupwise	eq	7.0.2
novell:groupwise	novell groupwise	eq	7.0.3
novell:groupwise	novell groupwise	eq	7.01
novell:groupwise	novell groupwise	eq	7.02x
novell:groupwise	novell groupwise	eq	7.03

References

packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt

secunia.com/advisories/35177

securitytracker.com/id?1022267

www.novell.com/support/search.do?cmd=displayKC&externalId=7003271

www.securityfocus.com/archive/1/503700/100/0/threaded

www.securityfocus.com/bid/35061

www.vupen.com/english/advisories/2009/1393

bugzilla.novell.com/show_bug.cgi?id=484942

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.2%

JSON

Related for CVE-2009-1762

prion1 cvelist1 nvd1