PT-2012-2453

CVE-2012-0272

·

Published

2012-09-19

·

Updated

2013-02-14

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 8.0 before Support Pack 3
Description A cross-site scripting issue exists in the WebAccess component, allowing remote attackers to inject arbitrary web script or HTML via the merge parameter.
Recommendations For Novell GroupWise versions 8.0 before Support Pack 3, apply Support Pack 3 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2012-0272
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com