GR
Product
Groupwise
74
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 3Low 0
Watch
Add Groupwise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5762 | 9.8 | Apr 20 | Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1)… Affected: through 2012; 2014; 2014; 2014; 2014 |
| CVE-2016-5761 | 6.1 | Apr 20 | Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allows remote attackers to inject arbitrary web script or HTML via a crafted… Affected: through 2012; 2014; 2014; 2014; 2014 |
| CVE-2016-5760 | 6.1 | Apr 20 | Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject… Affected: through 2012; 2014; 2014; 2014; 2014 |
| CVE-2016-9169 | 6.1 | Mar 23 | A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote… Affected: 2014 |
| CVE-2014-0611 | – | Jul 22 | Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 2012 before Support Pack 4 and 2014 before Support Pack 2 allow remote attackers to inject… Affected: through 2012; through 2014 |
| CVE-2014-0610 | – | Sep 5 | The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service… Affected: through 8.03; 8.0; 8.00; 8.00; 8.00; 8.01; +12 more |
| CVE-2014-0600 | – | Aug 29 | FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave… Affected: 2014 |
| CVE-2013-1087 | – | Jul 15 | Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject… Affected: through 8.03; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2013-1086 | – | Apr 19 | Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via… Affected: 2012; 2012; 2012; through 8.03; 5.2; 5.5; +34 more |
| CVE-2013-0804 | – | Feb 24 | The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer… Affected: 8.0; 8.00; 8.00; 8.00; 8.01; 8.01; +8 more |
| CVE-2012-0439 | – | Feb 24 | An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer… Affected: 8.0; 8.00; 8.00; 8.00; 8.01; 8.01; +8 more |
| CVE-2012-4912 | – | Sep 28 | Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to inject… Affected: 8.0; 8.00; 8.00; 8.00; 8.01; 8.01; +5 more |
| CVE-2012-0419 | – | Sep 28 | Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read… Affected: 8.0; 8.00; 8.00; 8.00; 8.01; 8.01; +5 more |
| CVE-2012-0418 | – | Sep 28 | Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote attackers to execute… Affected: 8.0; 8.00; 8.00; 8.00; 8.01; 8.01; +5 more |
| CVE-2012-0417 | – | Sep 28 | Integer overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to execute arbitrary code… Affected: 8.0; 8.00; 8.00; 8.00; 8.01; 8.01; +5 more |
| CVE-2012-0272 | – | Sep 19 | Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML… Affected: 8.0; 8.00; 8.00; 8.00 |
| CVE-2012-0271 | – | Sep 19 | Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before 8.0.3 HP1 and 2012 before SP1 might allow remote… Affected: 8.0; 8.01; 8.01; 8.02; 8.02; 8.02; +34 more |
| CVE-2011-3827 | – | Sep 19 | The iCalendar component in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to cause a denial of service… Affected: through 8.00; 8.0; 8.00; 8.00 |
| CVE-2012-0410 | – | Jul 5 | Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter Affected: through 8.02; 5.2; 5.5; 5.57e; 6.0; 6.0.1; +34 more |
| CVE-2011-4189 | – | Mar 2 | The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash)… Affected: 8.0; 8.0; 8.0; 8.0; 8.0.1; 8.0.2; +1 more |
| CVE-2011-2663 | – | Oct 8 | Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a… Affected: 8.0; 8.0; 8.0 |
| CVE-2011-2662 | – | Oct 8 | Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property… Affected: 8.0; 8.0; 8.0 |
| CVE-2011-2661 | – | Oct 8 | Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1)… Affected: 8.0; 8.0; 8.0 |
| CVE-2011-2219 | – | Oct 8 | Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown… Affected: 8.0; 8.0; 8.0 |
| CVE-2011-2218 | – | Oct 8 | Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown… Affected: 8.0; 8.0; 8.0 |
| CVE-2011-0334 | – | Oct 8 | Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP… Affected: 8.0; 8.0; 8.0 |
| CVE-2011-0333 | – | Oct 8 | Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote… Affected: 8.0; 8.0; 8.0 |
| CVE-2010-4712 | – | Jan 31 | Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a… Affected: through 8.0.2; 4.1; 4.1a; 5.0; 5.1; 5.2; +26 more |
| CVE-2010-4717 | – | Jan 31 | Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary… Affected: through 8.0.2; 4.1; 4.1a; 5.0; 5.1; 5.2; +26 more |
| CVE-2010-4716 | – | Jan 31 | Cross-site scripting (XSS) vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via… Affected: through 8.0.2; 4.1; 4.1a; 5.0; 5.1; 5.2; +26 more |
| CVE-2010-4715 | – | Jan 31 | Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read… Affected: through 8.0.2; 4.1; 4.1a; 5.0; 5.1; 5.2; +26 more |
| CVE-2010-4714 | – | Jan 31 | Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) gwpoa.exe in the Post… Affected: through 8.0.2; 4.1; 4.1a; 5.0; 5.1; 5.2; +26 more |
| CVE-2010-4713 | – | Jan 31 | Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a signed integer… Affected: through 8.0.2; 4.1; 4.1a; 5.0; 5.1; 5.2; +26 more |
| CVE-2010-4711 | – | Jan 31 | Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a… Affected: through 8.0.2; 4.1; 4.1a; 5.0; 5.1; 5.2; +26 more |
| CVE-2010-2777 | – | Jan 28 | Stack-based buffer overflow in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote… Affected: 7.0; 7.0; 7.0; 7.0; 8.0; 8.0 |
| CVE-2010-2778 | – | Jan 28 | Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script… Affected: 7.0; 7.0; 7.0; 7.0; 8.0; 8.0 |
| CVE-2010-2779 | – | Jan 28 | Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message,… Affected: 8.0; 8.0 |
| CVE-2010-4325 | – | Jan 28 | Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable… Affected: through 8.0.2; 4.1; 4.1a; 5.0; 5.1; 5.2; +26 more |
| CVE-2010-4326 | – | Jan 28 | Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a… Affected: through 8.0.2; 4.1; 4.1a; 5.0; 5.1; 5.2; +26 more |
| CVE-2009-4662 | – | Mar 3 | Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web… Affected: 7.0; 7.0; 7.0; 7.0; 7.01; 7.03; +1 more |
| CVE-2009-3863 | – | Nov 4 | Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause a denial of service (application crash) via a long… Affected: 7.0.3.1294 |
| CVE-2009-1636 | – | May 26 | Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary… Affected: 7.0; 7.0; 7.0; 7.0; 7.0.0; 7.0.0; +6 more |
| CVE-2009-1634 | – | May 26 | The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to… Affected: 7.0; 7.0.0; 7.0.0; 7.0.2; 7.0.3; 7.03; +3 more |
| CVE-2009-1762 | – | May 22 | Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary… Affected: 7.0; 7.0; 7.0; 7.0; 7.0.0; 7.0.0; +7 more |
| CVE-2009-1635 | – | May 22 | Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject… Affected: 7.0; 7.0; 7.0; 7.0; 7.0.0; 7.0.0; +9 more |
| CVE-2009-0410 | – | Feb 3 | Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute… Affected: 6.5; 7.0; 7.01; 7.02x; 7.03; 7.03; +1 more |
| CVE-2009-0274 | – | Feb 3 | Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote attackers to obtain sensitive information via a… Affected: 6.5; 7.0; 7.01; 7.02x; 7.03; 7.03; +1 more |
| CVE-2009-0273 | – | Feb 2 | Multiple cross-site scripting (XSS) vulnerabilities in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allow remote attackers to inject arbitrary web… Affected: 6.5; 7.0; 7.01; 7.02x; 7.03; 7.03; +1 more |
| CVE-2009-0272 | – | Feb 2 | Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote attackers to insert e-mail forwarding… Affected: 6.5; 7.0; 7.01; 7.02x; 7.03; 7.03; +1 more |
| CVE-2008-3501 | – | Aug 6 | Cross-site scripting (XSS) vulnerability in the WebAccess simple interface in Novell Groupwise 7.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: 7.0; 7.0; 7.0; 7.0; 7.0.2; 7.0.3 |