XSS in Novell Groupwise
CVE-2012-4912
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to inject arbitrary web script or HTML via a crafted signature in an H…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.019 (83.8th percentile) — read the EPSS interpretation.
Affected products
- Novell Groupwise — versions 8.0, 8.00, 8.01
- N/a — versions n/a
Weakness classification (CWE)
References
- 1027614 (vdb-entry, x_refsource_SECTRACK)
- PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Vendor Advisory)
- 55814 (vdb-entry, x_refsource_BID)
- PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)
- 50622 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)
- PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Patch)