Approved changes feed: RSS · Atom

cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*

part: a version: 7.0 update: sp1

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductGroupwise (7e0bb26e-48ac-551b-b90c-28323a79fe23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2778 vulnerable 2026-06-08 04:55:10.528099 Details available
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to a "Javascript XSS exploit."
Published: 2011-01-28T21:13:00.000Z
Updated: 2024-09-16T19:47:29.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2777 vulnerable 2026-06-08 04:55:10.523086 Details available
Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to execute arbitrary code via a long mailbox name in a CREATE command.
Published: 2011-01-28T21:13:00.000Z
Updated: 2024-09-16T20:43:06.337Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4662 vulnerable 2026-06-08 04:51:49.240344 Details available
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter.
Published: 2010-03-03T20:00:00.000Z
Updated: 2024-08-07T07:08:38.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1762 vulnerable 2026-06-08 04:51:24.741139 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the (1) GWAP.version or (2) User.Theme (aka User.Theme.index) parameter.
Published: 2009-05-22T16:25:00.000Z
Updated: 2024-08-07T05:27:53.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1636 vulnerable 2026-06-08 04:51:24.292938 Details available
Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command.
Published: 2009-05-26T15:16:00.000Z
Updated: 2024-08-07T05:20:35.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1635 vulnerable 2026-06-08 04:51:24.288898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3501 vulnerable 2026-06-08 04:50:34.913213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2069 vulnerable 2026-06-08 04:50:22.826680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3571 vulnerable 2026-06-08 04:49:54.254358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2513 vulnerable 2026-06-08 04:49:45.154458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2171 vulnerable 2026-06-08 04:49:44.249631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.