CVE-2013-1086

Published: Apr 19, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute.

Affected (50)

Products: Novell: Groupwise

Novell

1 product

Groupwise

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Novell Groupwise	Version 2012
Novell Groupwise	Version 2012 sp1
Novell Groupwise	Version 2012 sp1_hp1

Configuration B

47 vulnerable

Vulnerable Software	Affected Versions
Novell Groupwise	Up to 8.03
Novell Groupwise	Version 5.2
Novell Groupwise	Version 5.57e
Novell Groupwise	Version 5.5
Novell Groupwise	Version 6.0.1 sp1
Novell Groupwise	Version 6.0
Novell Groupwise	Version 6.5.2
Novell Groupwise	Version 6.5.3
Novell Groupwise	Version 6.5.4
Novell Groupwise	Version 6.5.6
Novell Groupwise	Version 6.5.7
Novell Groupwise	Version 6.5
Novell Groupwise	Version 6.5 sp1
Novell Groupwise	Version 6.5 sp2
Novell Groupwise	Version 6.5 sp3
Novell Groupwise	Version 6.5 sp4
Novell Groupwise	Version 6.5 sp5
Novell Groupwise	Version 6.5 sp6
Novell Groupwise	Version 7.0.3 hp4
Novell Groupwise	Version 7.0.3 hp5
Novell Groupwise	Version 7.0.4
Novell Groupwise	Version 7.0.4 ftf
Novell Groupwise	Version 7.01
Novell Groupwise	Version 7.01 ir1
Novell Groupwise	Version 7.02
Novell Groupwise	Version 7.02 hp1
Novell Groupwise	Version 7.02 hp1a
Novell Groupwise	Version 7.02 hp2
Novell Groupwise	Version 7.02 hp2r1
Novell Groupwise	Version 7.03
Novell Groupwise	Version 7.03 hp2
Novell Groupwise	Version 7.03 hp3
Novell Groupwise	Version 7.03 hp3+ftf
Novell Groupwise	Version 7.03 hp
Novell Groupwise	Version 7.0
Novell Groupwise	Version 8.00 hp1
Novell Groupwise	Version 8.00 hp2
Novell Groupwise	Version 8.00 hp3
Novell Groupwise	Version 8.01
Novell Groupwise	Version 8.01 hp
Novell Groupwise	Version 8.02
Novell Groupwise	Version 8.02 hp1
Novell Groupwise	Version 8.02 hp2
Novell Groupwise	Version 8.02 hp3
Novell Groupwise	Version 8.03
Novell Groupwise	Version 8.03 hp1
Novell Groupwise	Version 8.0