GR
Product
Groupwise
74
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 3Low 0
Watch
Add Groupwise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-2069 | – | May 2 | Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto: URI Affected: 7.0; 7.0; 7.0; 7.0 |
| CVE-2008-1330 | – | Mar 18 | Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +10 more |
| CVE-2007-6435 | – | Dec 18 | Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long… Affected: through 6.5.6 |
| CVE-2007-3571 | – | Jul 5 | The Apache Web Server as used in Novell NetWare 6.5 and GroupWise allows remote attackers to obtain sensitive information via a certain directive to Apache that causes the… Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0.1; +12 more |
| CVE-2007-2513 | – | Jun 4 | Novell GroupWise 7 before SP2 20070524, and GroupWise 6 before 6.5 post-SP6 20070522, allows remote attackers to obtain credentials via a man-in-the-middle attack Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +3 more |
| CVE-2007-2171 | – | Apr 24 | Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via… Affected: 7.0; 7.0 |
| CVE-2006-4220 | – | Dec 31 | Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web… Affected: 5.57e; 6.5.7; 7.0; 7.0.0; 7.0.0 |
| CVE-2006-3268 | – | Jun 29 | Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic access" to other email within the same post… Affected: 5.2; 5.5; 6.0; 6.0; 6.0; 6.0; +11 more |
| CVE-2005-2804 | – | Oct 4 | Integer overflow in the registry parsing code in GroupWise 6.5.3, and possibly earlier version, allows remote attackers to cause a denial of service (application crash) via a… Affected: 6.5.3 |
| CVE-2005-2620 | – | Aug 17 | grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another… Affected: 6.0; 6.5; 6.5.2 |
| CVE-2005-2346 | – | Aug 3 | Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a long entry, as demonstrated using a long… Affected: 6.5 |
| CVE-2005-0296 | – | Jan 17 | NOTE: this issue has been disputed by the vendor Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.5; +2 more |
| CVE-2003-1551 | – | Dec 31 | Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script." Affected: through 6.0_sp3 |
| CVE-2002-1088 | – | Oct 4 | Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command Affected: 6.0; 6.0; 6.0.1 |
| CVE-2002-0341 | – | Jun 25 | GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid… Affected: 5.5 |
| CVE-2002-0303 | – | May 31 | GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a… Affected: 6.0 |
| CVE-2001-1195 | – | Dec 15 | Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges Affected: 5.5; 6.0 |
| CVE-2001-1458 | – | Oct 15 | Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../"… Affected: 5.5; 5.5; 6.0 |
| CVE-2001-1231 | – | Aug 14 | GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed… Affected: 5.5; 6.0 |
| CVE-2001-1232 | – | Aug 14 | GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get" Affected: 5.5 |
| CVE-2001-0355 | – | Jun 27 | Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies Affected: 5.5 |
| CVE-2000-0146 | – | Feb 7 | The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet Affected: 5.5 |
| CVE-1999-1006 | – | Dec 19 | Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter Affected: 5.2; 5.5 |
| CVE-1999-1005 | – | Dec 19 | Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a Affected: 5.2; 5.5 |