CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-5760

Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the (1) token parameter to gwadmin-console/install/login.jsp or (2) PATH_INFO to gwadmin-console/index.jsp.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 59.5%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2016-5760

Novell » Groupwise » Version: N/A

cpe:2.3:a:novell:groupwise:-
Novell » Groupwise » Version: 2012

cpe:2.3:a:novell:groupwise:2012
Novell » Groupwise » Version: 2014

cpe:2.3:a:novell:groupwise:2014
Novell » Groupwise » Version: 5.2

cpe:2.3:a:novell:groupwise:5.2
Novell » Groupwise » Version: 5.5

cpe:2.3:a:novell:groupwise:5.5
Novell » Groupwise » Version: 5.57e

cpe:2.3:a:novell:groupwise:5.57e
Novell » Groupwise » Version: 6.0

cpe:2.3:a:novell:groupwise:6.0
Novell » Groupwise » Version: 6.0.1

cpe:2.3:a:novell:groupwise:6.0.1
Novell » Groupwise » Version: 6.5

cpe:2.3:a:novell:groupwise:6.5
Novell » Groupwise » Version: 6.5.2

cpe:2.3:a:novell:groupwise:6.5.2
Novell » Groupwise » Version: 6.5.3

cpe:2.3:a:novell:groupwise:6.5.3
Novell » Groupwise » Version: 6.5.4

cpe:2.3:a:novell:groupwise:6.5.4
Novell » Groupwise » Version: 6.5.6

cpe:2.3:a:novell:groupwise:6.5.6
Novell » Groupwise » Version: 6.5.7

cpe:2.3:a:novell:groupwise:6.5.7
Novell » Groupwise » Version: 7.0

cpe:2.3:a:novell:groupwise:7.0
Novell » Groupwise » Version: 7.0.3

cpe:2.3:a:novell:groupwise:7.0.3
Novell » Groupwise » Version: 7.0.4

cpe:2.3:a:novell:groupwise:7.0.4
Novell » Groupwise » Version: 7.01

cpe:2.3:a:novell:groupwise:7.01
Novell » Groupwise » Version: 7.02

cpe:2.3:a:novell:groupwise:7.02
Novell » Groupwise » Version: 7.03

cpe:2.3:a:novell:groupwise:7.03
Novell » Groupwise » Version: 8.0

cpe:2.3:a:novell:groupwise:8.0
Novell » Groupwise » Version: 8.00

cpe:2.3:a:novell:groupwise:8.00
Novell » Groupwise » Version: 8.01

cpe:2.3:a:novell:groupwise:8.01
Novell » Groupwise » Version: 8.02

cpe:2.3:a:novell:groupwise:8.02
Novell » Groupwise » Version: 8.03

cpe:2.3:a:novell:groupwise:8.03

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-5760

Products

Pricing

Contact Us