4.3

CVE-2010-4716

Cross-site scripting (XSS) vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Novell ≫ Groupwise Version <= 8.0.2
Novell ≫ Groupwise Version4.1
Novell ≫ Groupwise Version4.1a
Novell ≫ Groupwise Version5.0
Novell ≫ Groupwise Version5.1
Novell ≫ Groupwise Version5.2
Novell ≫ Groupwise Version5.5
Novell ≫ Groupwise Version5.5 Editionenhancement_pack
Novell ≫ Groupwise Version5.57e
Novell ≫ Groupwise Version6.0
Novell ≫ Groupwise Version6.0 Updatesp1
Novell ≫ Groupwise Version6.0 Updatesp5
Novell ≫ Groupwise Version6.0.1 Updatesp1
Novell ≫ Groupwise Version6.5
Novell ≫ Groupwise Version6.5 Updatesp1
Novell ≫ Groupwise Version6.5 Updatesp2
Novell ≫ Groupwise Version6.5 Updatesp3
Novell ≫ Groupwise Version6.5 Updatesp4
Novell ≫ Groupwise Version6.5 Updatesp5
Novell ≫ Groupwise Version6.5 Updatesp6
Novell ≫ Groupwise Version6.5.2
Novell ≫ Groupwise Version6.5.3
Novell ≫ Groupwise Version6.5.4
Novell ≫ Groupwise Version6.5.6
Novell ≫ Groupwise Version6.5.7
Novell ≫ Groupwise Version7.0
Novell ≫ Groupwise Version7.0.1
Novell ≫ Groupwise Version7.0.2
Novell ≫ Groupwise Version7.0.3
Novell ≫ Groupwise Version7.0.4
Novell ≫ Groupwise Version8.0
Novell ≫ Groupwise Version8.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.789
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.