6.8

CVE-2005-1676

Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list.

Data is provided by the National Vulnerability Database (NVD)
Groove ≫ Groove Workspace Version <= 2.5n_build_1871
Groove ≫ Virtual Office Version <= 3.1_build_2338
Groove ≫ Virtual Office Version <= 3.1a_build_2364
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.62% 0.867
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
http://www.kb.cert.org/vuls/id/372618
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/514386
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/JGEI-6BCRCC
Third Party Advisory
US Government Resource