Novell » Groupwise Webaccess : Security Vulnerabilities, CVEs, Published In 2006
Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web script or HTML via the (1) User.html, (2) Error, (3) User.Theme.index, and (4) and User.lang parameters.
Max CVSS
4.3
EPSS Score
0.29%
Published
2006-12-31
Updated
2011-03-08
Cross-site scripting (XSS) vulnerability in the login page in Novell GroupWise WebAccess 6.5 before 20060721 and WebAccess 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via the GWAP.version parameter.
Max CVSS
4.3
EPSS Score
1.01%
Published
2006-08-11
Updated
2018-10-17
Cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess 6.5 and 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via an encoded SCRIPT element in an e-mail message with the UTF-7 character set, as demonstrated by the "+ADw-SCRIPT+AD4-" sequence.
Max CVSS
4.3
EPSS Score
0.65%
Published
2006-08-11
Updated
2018-10-17
3 vulnerabilities found