CVE-2016-5761

6.1MEDIUM

Key Information

Vendor: Novell
Status: Groupwise
Vendor: CVE Published:; 20 April 2017

Summary

Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allows remote attackers to inject arbitrary web script or HTML via a crafted email.

EPSS Score

1% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published.
Apr 20, 2017
Vulnerability Reserved.
Jun 23, 2016

Collectors

NVD DatabaseMitre Database