Cross site scripting

2012-09-1910:57:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.1%

JSON

Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter.

CPENameOperatorVersion
groupwiseeq8.0 hp3
groupwiseeq8.0
groupwiseeq8.0 hp1
groupwiseeq8.0 hp2

Name	Operator	Version
groupwise	eq	8.0 hp3
groupwise	eq	8.0
groupwise	eq	8.0 hp1
groupwise	eq	8.0 hp2

References

www.novell.com/support/kb/doc.php?id=7010368

www.securitytracker.com/id?1027615

bugzilla.novell.com/show_bug.cgi?id=702785

bugzilla.novell.com/show_bug.cgi?id=740563