CVEvulnerability
CVE-2009-4662
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-03-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter.
Affected configurations
• novell groupwise 7.0
• novell groupwise 7.01
• novell groupwise 7.03
• novell groupwise 8.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/36746 Vendor Advisory
- http://www.novell.com/support/viewContent.do?externalId=7004410&sliceId=1 Vendor Advisory
- http://www.securityfocus.com/bid/36437 www.securityfocus.com
- http://www.securitytracker.com/id?1022910 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/2689 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53322 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/36746 Vendor Advisory
- http://www.novell.com/support/viewContent.do?externalId=7004410&sliceId=1 Vendor Advisory
- http://www.securityfocus.com/bid/36437 www.securityfocus.com
- http://www.securitytracker.com/id?1022910 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/2689 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53322 exchange.xforce.ibmcloud.com