CVE-2011-2661
Novell Groupwise - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter.
Scores
EPSS
0.0034
EPSS Percentile
56.3%
Classification
CWE
CWE-79
Status
published
Affected Products (4)
novell/groupwise
novell/groupwise
novell/groupwise
n/a/n/a
Timeline
Published
Oct 08, 2011
Tracked Since
Feb 18, 2026