Approved changes feed: RSS · Atom

cpe:2.3:a:novell:groupwise:7.0:sp3:*:*:*:*:*:*

part: a version: 7.0 update: sp3

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductGroupwise (7e0bb26e-48ac-551b-b90c-28323a79fe23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2778 vulnerable 2026-06-08 04:55:10.528298 Details available
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to a "Javascript XSS exploit."
Published: 2011-01-28T21:13:00.000Z
Updated: 2024-09-16T19:47:29.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2777 vulnerable 2026-06-08 04:55:10.524931 Details available
Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to execute arbitrary code via a long mailbox name in a CREATE command.
Published: 2011-01-28T21:13:00.000Z
Updated: 2024-09-16T20:43:06.337Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4662 vulnerable 2026-06-08 04:51:49.242244 Details available
Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter.
Published: 2010-03-03T20:00:00.000Z
Updated: 2024-08-07T07:08:38.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1762 vulnerable 2026-06-08 04:51:24.741184 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the (1) GWAP.version or (2) User.Theme (aka User.Theme.index) parameter.
Published: 2009-05-22T16:25:00.000Z
Updated: 2024-08-07T05:27:53.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1636 vulnerable 2026-06-08 04:51:24.292975 Details available
Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command.
Published: 2009-05-26T15:16:00.000Z
Updated: 2024-08-07T05:20:35.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1635 vulnerable 2026-06-08 04:51:24.290016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3501 vulnerable 2026-06-08 04:50:34.914232 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2069 vulnerable 2026-06-08 04:50:22.827753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.