CVEvulnerability
CVE-2011-2661
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-10-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter.
Affected configurations
• novell groupwise 8.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.novell.com/support/viewContent.do?externalId=7009214 Vendor Advisory
- https://bugzilla.novell.com/show_bug.cgi?id=702786 bugzilla.novell.com
- http://www.novell.com/support/viewContent.do?externalId=7009214 Vendor Advisory
- https://bugzilla.novell.com/show_bug.cgi?id=702786 bugzilla.novell.com