Описание
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the (1) token parameter to gwadmin-console/install/login.jsp or (2) PATH_INFO to gwadmin-console/index.jsp.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 2012 (включая)
Одно из
cpe:2.3:a:novell:groupwise:*:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:2014:-:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:2014:r2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:2014:sp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:2014:sp2:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00397
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
больше 3 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the (1) token parameter to gwadmin-console/install/login.jsp or (2) PATH_INFO to gwadmin-console/index.jsp.
EPSS
Процентиль: 60%
0.00397
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79