GCVE - cpe:2.3:a:groove:groove_workspace:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:groove:groove_workspace:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Groove (`d1ebed1c-2ce5-5514-8ee4-bc052b40dbf3`)
Product	Groove Workspace (`7ebd3ce8-e266-55c1-954e-16346b7ea4b8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-1678`	vulnerable	2026-06-08 04:48:27.183894	Details available Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code. Published: 2005-05-25T04:00:00.000Z Updated: 2024-09-16T22:46:56.271Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15421 http://www.kb.cert.org/vuls/id/232232 http://www.kb.cert.org/vuls/id/JGEI-6BCRD6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1677`	vulnerable	2026-06-08 04:48:27.183604	Details available Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass restrictions on COM objects. Published: 2005-05-25T04:00:00.000Z Updated: 2024-08-07T21:59:23.549Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15421 http://www.kb.cert.org/vuls/id/155610 http://www.kb.cert.org/vuls/id/JGEI-6BCRCM	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1676`	vulnerable	2026-06-08 04:48:27.183280	Details available Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list. Published: 2005-05-25T04:00:00.000Z Updated: 2024-09-16T23:56:31.504Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15421 http://www.kb.cert.org/vuls/id/514386 http://www.kb.cert.org/vuls/id/372618 http://www.kb.cert.org/vuls/id/JGEI-6BCRCC	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1675`	vulnerable	2026-06-08 04:48:27.182206	Details available Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure EVERYBODY permissions, which allows local users to gain sensitive information. Published: 2005-05-25T04:00:00.000Z Updated: 2024-09-17T02:57:01.494Z Open on db.gcve.eu Reference links http://secunia.com/advisories/15421 http://www.kb.cert.org/vuls/id/443370 http://www.kb.cert.org/vuls/id/JGEI-6BCRBX	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.