CVE-2012-4912

Novell GroupWise WebAccess - Cross-Site Scripting via HTML Email Signature

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to inject arbitrary web script or HTML via a crafted signature in an HTML e-mail message.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027614
Vendor Advisory x_refsource_confirm
http://www.novell.com/support/kb/doc.php?id=7010768
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/55814
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=745425
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50622
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=702788

Scores

EPSS 0.0143
EPSS Percentile 80.9%

Details

CWE
CWE-79
Status published
Products (5)
novell/groupwise 8.0
novell/groupwise 8.00 hp1 (3 CPE variants)
novell/groupwise 8.01 (2 CPE variants)
novell/groupwise 8.02 (4 CPE variants)
novell/groupwise 2012
Published Sep 28, 2012
Tracked Since Feb 18, 2026