CVE: CVE-2005-2276

Export to Word

Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI (e.g. "j&#X41vascript" in an IMG tag.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.01463
Percentile: 0.79999

CVSS Scoring

CVSS v2 Score: 4.3

Severity:

Affected Products

cpe:2.3:a:novell:groupwise_webaccess:6.0:sp4:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise_webaccess:6.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise_webaccess:6.5:sp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise_webaccess:6.5:sp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise_webaccess:6.5:sp3:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise_webaccess:6.5:sp4:*:*:*:*:*:*

← Back to Home