Approved changes feed: RSS · Atom

cpe:2.3:a:novell:groupwise:8.0:sp1:*:*:*:*:*:*

part: a version: 8.0 update: sp1

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductGroupwise (7e0bb26e-48ac-551b-b90c-28323a79fe23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4189 vulnerable 2026-06-08 04:59:29.825295 Details available
The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via a long e-mail address in an Address Book (aka .NAB) file.
Published: 2012-03-02T22:00:00.000Z
Updated: 2024-08-07T00:01:51.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2779 vulnerable 2026-06-08 04:55:10.528688 Details available
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to "replies."
Published: 2011-01-28T21:13:00.000Z
Updated: 2024-09-17T02:16:48.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2778 vulnerable 2026-06-08 04:55:10.528348 Details available
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to a "Javascript XSS exploit."
Published: 2011-01-28T21:13:00.000Z
Updated: 2024-09-16T19:47:29.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2777 vulnerable 2026-06-08 04:55:10.527668 Details available
Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to execute arbitrary code via a long mailbox name in a CREATE command.
Published: 2011-01-28T21:13:00.000Z
Updated: 2024-09-16T20:43:06.337Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.