Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

novell groupwise 2012 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2014-0610
The client in Novell GroupWise prior to 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote malicious users to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.
Novell Groupwise 2012Novell GroupwiseNovell Groupwise 8.02Novell Groupwise 8.01Novell Groupwise 8.03Novell Groupwise 8.00Novell Groupwise 2014Novell Groupwise 8.0
10
CVSSv2
CVE-2013-0804
The client in Novell GroupWise 8.0 prior to 8.0.3 HP2 and 2012 before SP1 HP1 allows remote malicious users to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via unspecified vectors.
Novell Groupwise 8.00Novell Groupwise 8.0Novell Groupwise 8.01Novell Groupwise 8.02Novell Groupwise 8.03Novell Groupwise 2012
10
CVSSv2
CVE-2012-0417
Integer overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote malicious users to execute arbitrary code via unspecified vectors.
Novell Groupwise 8.02Novell Groupwise 8.00Novell Groupwise 2012Novell Groupwise 8.0Novell Groupwise 8.01
10
CVSSv2
CVE-2012-0271
Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 prior to 8.0.3 HP1 and 2012 before SP1 might allow remote malicious users to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow...
Novell Groupwise 8.02Novell Groupwise 8.03Novell Groupwise 8.01Novell Groupwise 8.0Novell Groupwise 2012Novell Groupwise 7.03Novell Groupwise 7.0.4Novell Groupwise 7.02Novell Groupwise 7.01Novell Groupwise 6.5.4Novell Groupwise 6.5.7Novell Groupwise 5.5Novell Groupwise 5.2Novell Groupwise 7.0Novell Groupwise 7.0.3Novell Groupwise 6.5Novell Groupwise 6.0.1Novell Groupwise 6.5.6Novell Groupwise 6.5.3Novell Groupwise 6.0Novell Groupwise 5.57eNovell Groupwise 6.5.2
9.3
CVSSv2
CVE-2012-0439
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 prior to 8.0.3 HP2 and 2012 before SP1 HP1 allows remote malicious users to execute arbitrary code via (1) a pointer argument to the SetEngine method or (2) an XPItem pointer argument to an unspecified method.
Novell Groupwise 8.00Novell Groupwise 8.0Novell Groupwise 8.02Novell Groupwise 8.03Novell Groupwise 8.01Novell Groupwise 2012
9.3
CVSSv2
CVE-2012-0418
Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote malicious users to execute arbitrary code via a crafted file.
Novell Groupwise 8.00Novell Groupwise 8.01Novell Groupwise 8.0Novell Groupwise 8.02Novell Groupwise 2012
5
CVSSv2
CVE-2012-0419
Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote malicious users to read arbitrary files via directory traversal sequences in a request.
Novell Groupwise 8.0Novell Groupwise 8.02Novell Groupwise 8.00Novell Groupwise 2012Novell Groupwise 8.01
5
CVSSv2
CVE-2012-0410
Directory traversal vulnerability in WebAccess in Novell GroupWise prior to 8.03 allows remote malicious users to read arbitrary files via the User.interface parameter.
Novell Groupwise 6.5.2Novell Groupwise 6.5.3Novell Groupwise 6.5Novell Groupwise 7.02Novell Groupwise 7.03Novell Groupwise 7.0.3Novell Groupwise 8.01Novell Groupwise 7.0Novell Groupwise 6.5.7Novell Groupwise 5.5Novell Groupwise 5.2Novell Groupwise 7.01Novell Groupwise 6.5.6Novell Groupwise 6.5.4Novell Groupwise 5.57eNovell Groupwise 6.0Novell Groupwise 7.0.4Novell Groupwise 8.02Novell Groupwise 8.0Novell GroupwiseNovell Groupwise 6.0.1Novell Groupwise 8.00
4.3
CVSSv2
CVE-2014-0611
Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 2012 before Support Pack 4 and 2014 before Support Pack 2 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Novell Groupwise
4.3
CVSSv2
CVE-2013-1087
Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise up to and including 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote malicious users to inject arbitrary web script or HTML via the body of an e-mail message.
Novell Groupwise 8.03Novell Groupwise 8.0Novell Groupwise 8.01Novell Groupwise 7.02Novell Groupwise 7.03Novell Groupwise 7.0.4Novell Groupwise 6.5.3Novell Groupwise 6.5.4Novell Groupwise 6.5.7Novell Groupwise 6.5Novell Groupwise 8.02Novell Groupwise 8.00Novell Groupwise 7.01Novell Groupwise 2012Novell GroupwiseNovell Groupwise 7.0Novell Groupwise 7.0.3Novell Groupwise 6.5.6Novell Groupwise 6.5.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook