CVE-2009-1635

Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote…

published May 22, 2009

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject arbitrary web script or HTML via (1) the User.lang parameter to the login page (aka gw/webacc), (2) style expressions in a message that contains an HTML file, or (3) vectors associated with incorrect protection mechanisms against scripting, as demonstrated using whitespace between JavaScript event names and values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01905 · 79.6th percentile
Published
2009-05-22T16:25Z
EPSS history
Timeline
  • 22 MAY 16:25Z
    Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote…
    cvelistv5