Approved changes feed: RSS · Atom

cpe:2.3:a:novell:groupwise:2014:sp2:*:*:*:*:*:*

part: a version: 2014 update: sp2

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductGroupwise (7e0bb26e-48ac-551b-b90c-28323a79fe23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5762 vulnerable 2026-06-08 05:07:57.702356 Details available
Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1) username or (2) password, which triggers a heap-based buffer overflow.
Published: 2017-04-20T17:00:00.000Z
Updated: 2024-08-06T01:15:10.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5761 vulnerable 2026-06-08 05:07:57.701890 Details available
Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allows remote attackers to inject arbitrary web script or HTML via a crafted email.
Published: 2017-04-20T17:00:00.000Z
Updated: 2024-08-06T01:15:09.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5760 vulnerable 2026-06-08 05:07:57.701328 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the (1) token parameter to gwadmin-console/install/login.jsp or (2) PATH_INFO to gwadmin-console/index.jsp.
Published: 2017-04-20T17:00:00.000Z
Updated: 2024-08-06T01:15:10.782Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.