Cross-site Scripting Vulnerability in Novell GroupWise
CVE-2013-1087

Currently unrated

Key Information:

Vendor

Novell
Status
Groupwise
Vendor
CVE Published:
15 July 2013

What is CVE-2013-1087?

A cross-site scripting (XSS) vulnerability in the client of Novell GroupWise allows user-assisted remote attackers to inject arbitrary web scripts or HTML through the body of an email message. This can lead to significant security risks as attackers could execute malicious scripts in a user's browser, compromising sensitive information or leading to further attacks.

References

https://bugzilla.novell.com/show_bug.cgi?id=799673
x_refsource_CONFIRM
http://www.novell.com/support/kb/doc.php?id=7012063
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.
CVE-2013-1087 : Cross-site Scripting Vulnerability in Novell GroupWise