NVD

Id
85171  
Name
CVE-2016-5760  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the (1) token parameter to gwadmin-console/install/login.jsp or (2) PATH_INFO to gwadmin-console/index.jsp.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-04-27  
Published
2017-04-20  
Modified Date
2017-04-25  
Seq
2016-5760  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
415136 85171 CVE-2014-7279 35103  View
415137 85171 CVE-2014-7279 35103  View
418125 85171 CVE-2017-3508 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418126 85171 CVE-2017-3508 97883  View
418127 85171 CVE-2017-3508 97889  View
418128 85171 CVE-2017-3508 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418129 85171 CVE-2017-3508 97883  View
418130 85171 CVE-2017-3508 97889  View

Related JVN