XSS in Novell Groupwise

CVE-2011-2661

Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.

Affected products

Novell Groupwise — versions 8.0
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)