Описание
Cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess 6.5 and 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via an encoded SCRIPT element in an e-mail message with the UTF-7 character set, as demonstrated by the "+ADw-SCRIPT+AD4-" sequence.
Ссылки
- ExploitPatch
- ExploitPatchVendor Advisory
- Patch
- ExploitPatch
- Patch
- ExploitPatch
- ExploitPatchVendor Advisory
- Patch
- ExploitPatch
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:novell:groupwise_webaccess:6.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise_webaccess:6.5:sp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise_webaccess:6.5:sp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise_webaccess:6.5:sp3:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise_webaccess:6.5:sp4:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise_webaccess:7:*:*:*:*:*:*:*
EPSS
Процентиль: 71%
0.00657
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess 6.5 and 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via an encoded SCRIPT element in an e-mail message with the UTF-7 character set, as demonstrated by the "+ADw-SCRIPT+AD4-" sequence.
EPSS
Процентиль: 71%
0.00657
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other