Approved changes feed: RSS · Atom

cpe:2.3:a:microfocus:groupwise:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrofocus (cc324dd9-9ad0-55dc-9b4f-9941987276c3)
ProductGroupwise (837a2706-f8e8-53a4-a1f9-b6cd354fcda3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38756 vulnerable 2026-06-08 05:47:16.985218 CVE-2022-38756 vulnerability in GW Web prior to 18.4.2
MEDIUM (4.3)
A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies.
Published: 2022-12-16T00:00:00.000Z
Updated: 2025-04-18T13:22:18.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12468 vulnerable 2026-06-08 05:10:41.608517 Arbitrary File Upload in GroupWise Administration Console
CRITICAL (9.1)
A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remote code execution.
Published: 2018-08-01T20:00:00.000Z
Updated: 2024-09-16T19:25:29.758Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.