XSS in Microsoft Windows
CVE-2013-1087
Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.006 (70.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows
- Novell Groupwise — versions 6.5, 6.5.2, 6.5.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)