6.8

CVE-2005-1676

EPSS 3.62%
Veröffentlicht 20.05.2005 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Groove ≫ Groove Workspace Version <= 2.5n_build_1871

Groove ≫ Virtual Office Version <= 3.1_build_2338

Groove ≫ Virtual Office Version <= 3.1a_build_2364

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.62%	0.867

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/15421

Patch

Vendor Advisory

http://www.kb.cert.org/vuls/id/372618

Third Party Advisory

US Government Resource

http://www.kb.cert.org/vuls/id/514386

Third Party Advisory

US Government Resource

http://www.kb.cert.org/vuls/id/JGEI-6BCRCC

Third Party Advisory

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2005-1676

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-1676

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-1676

EUVD