GCVE - cpe:2.3:a:novell:groupwise:8.03:hp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:novell:groupwise:8.03:hp1:*:*:*:*:*:*

part: a version: 8.03 update: hp1

Vendor	Novell (`4a1c187d-e568-531f-92b0-685a3df2807c`)
Product	Groupwise (`7e0bb26e-48ac-551b-b90c-28323a79fe23`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0610`	vulnerable	2026-06-08 05:05:13.780305	Details available The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors. Published: 2014-09-05T01:00:00.000Z Updated: 2024-08-06T09:20:19.698Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/95738 http://www.novell.com/support/kb/doc.php?id=7015565 http://www.securitytracker.com/id/1030802 https://bugzilla.novell.com/show_bug.cgi?id=874533	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1087`	vulnerable	2026-06-08 05:03:52.407025	Details available Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message. Published: 2013-07-15T20:00:00.000Z Updated: 2024-09-16T22:55:44.818Z Open on db.gcve.eu Reference links https://bugzilla.novell.com/show_bug.cgi?id=799673 http://www.novell.com/support/kb/doc.php?id=7012063	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1086`	vulnerable	2026-06-08 05:03:52.403752	Details available Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute. Published: 2013-04-19T10:00:00.000Z Updated: 2024-08-06T14:49:20.697Z Open on db.gcve.eu Reference links http://www.novell.com/support/kb/doc.php?id=7012064 https://bugzilla.novell.com/show_bug.cgi?id=802906 http://secunia.com/advisories/53098	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0804`	vulnerable	2026-06-08 05:03:50.210478	Details available The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via unspecified vectors. Published: 2013-02-24T02:00:00.000Z Updated: 2024-09-16T23:52:00.558Z Open on db.gcve.eu Reference links http://www.novell.com/support/kb/doc.php?id=7011687 https://www.htbridge.com/advisory/HTB23131 https://bugzilla.novell.com/show_bug.cgi?id=792535	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0439`	vulnerable	2026-06-08 05:00:42.409588	Details available An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method. Published: 2013-02-24T02:00:00.000Z Updated: 2024-09-17T01:21:06.732Z Open on db.gcve.eu Reference links https://bugzilla.novell.com/show_bug.cgi?id=743674 https://bugzilla.novell.com/show_bug.cgi?id=712144 http://www.zerodayinitiative.com/advisories/ZDI-13-008/ http://www.novell.com/support/kb/doc.php?id=7011688	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.