CVE-2014-0611

Currently unrated

Key Information:

Vendor
Novell
Status
Groupwise
Vendor
CVE Published:
22 July 2015

Summary

Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 2012 before Support Pack 4 and 2014 before Support Pack 2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

http://www.securitytracker.com/id/1032978
vdb-entryx_refsource_SECTRACK
http://www.novell.com/support/kb/doc.php?id=7016653
x_refsource_CONFIRM
https://bugzilla.novell.com/show_bug.cgi?id=909590
x_refsource_CONFIRM

EPSS Score

1% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.