Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-1087

Опубликовано: 15 июл. 2013
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:novell:groupwise:*:hp3:*:*:*:*:*:*
Версия до 8.03 (включая)
cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp3:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp4:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp5:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp6:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5.2:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5.3:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5.4:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5.6:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5.7:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0.3:hp4:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0.3:hp5:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0.4:ftf:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.01:ir1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02:hp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02:hp1a:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02:hp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02:hp2r1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:hp:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:hp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:hp3:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:hp3\+ftf:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.00:hp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.00:hp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.00:hp3:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.01:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.01:hp:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.02:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.02:hp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.02:hp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.02:hp3:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.03:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.03:hp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.03:hp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:2012:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:2012:sp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:2012:sp1_hp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:2012:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

EPSS

Процентиль: 70%
0.00637
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message.

EPSS

Процентиль: 70%
0.00637
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79