) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- CPE Product Version: cpe:/a:novell:groupwise:7.03:hp
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2013-1087 |
Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message. Published: July 15, 2013; 4:55:02 PM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2013-1086 |
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute. Published: April 19, 2013; 7:44:23 AM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2012-0271 |
Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow, as demonstrated by a request with -1 in the Content-Length HTTP header. Published: September 19, 2012; 6:57:01 AM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
| CVE-2012-0410 |
Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter. Published: July 05, 2012; 10:55:01 AM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |