Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2013-1086 Details

Description

Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://bugzilla.novell.com/show_bug.cgi?id=802906	CVE	Issue Tracking
http://secunia.com/advisories/53098	CVE	Permissions Required
http://www.novell.com/support/kb/doc.php?id=7012064	CVE	Third Party AdvisoryVendor Advisory
https://bugzilla.novell.com/show_bug.cgi?id=802906	[email protected]	Issue Tracking
http://secunia.com/advisories/53098	[email protected]	Permissions Required
http://www.novell.com/support/kb/doc.php?id=7012064	[email protected]	Third Party AdvisoryVendor Advisory

see all 6 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	[email protected]

Affected Products

Product	Versions
novell groupwise	2012 2012 sp1 2012 sp1_hp1 <= 8.03 5.2
CPE cpe:2.3:a:novell:groupwise:2012:::::::* cpe:2.3:a:novell:groupwise:2012:sp1:::::: cpe:2.3:a:novell:groupwise:2012:sp1_hp1:::::: cpe:2.3:a:novell:groupwise::hp2::::::* cpe:2.3:a:novell:groupwise:5.2:::::::* cpe:2.3:a:novell:groupwise:5.5:::::::* cpe:2.3:a:novell:groupwise:5.57e:::::::* cpe:2.3:a:novell:groupwise:6.0:::::::* cpe:2.3:a:novell:groupwise:6.0.1:sp1:::::: cpe:2.3:a:novell:groupwise:6.5:::::::* cpe:2.3:a:novell:groupwise:6.5:sp1:::::: cpe:2.3:a:novell:groupwise:6.5:sp2:::::: cpe:2.3:a:novell:groupwise:6.5:sp3:::::: cpe:2.3:a:novell:groupwise:6.5:sp4:::::: cpe:2.3:a:novell:groupwise:6.5:sp5:::::: cpe:2.3:a:novell:groupwise:6.5:sp6:::::: cpe:2.3:a:novell:groupwise:6.5.2:::::::* cpe:2.3:a:novell:groupwise:6.5.3:::::::* cpe:2.3:a:novell:groupwise:6.5.4:::::::* cpe:2.3:a:novell:groupwise:6.5.6:::::::* cpe:2.3:a:novell:groupwise:6.5.7:::::::* cpe:2.3:a:novell:groupwise:7.0:::::::* cpe:2.3:a:novell:groupwise:7.0.3:hp4:::::: cpe:2.3:a:novell:groupwise:7.0.3:hp5:::::: cpe:2.3:a:novell:groupwise:7.0.4:::::::* cpe:2.3:a:novell:groupwise:7.0.4:ftf:::::: cpe:2.3:a:novell:groupwise:7.01:::::::* cpe:2.3:a:novell:groupwise:7.01:ir1:::::: cpe:2.3:a:novell:groupwise:7.02:::::::* cpe:2.3:a:novell:groupwise:7.02:hp1:::::: cpe:2.3:a:novell:groupwise:7.02:hp1a:::::: cpe:2.3:a:novell:groupwise:7.02:hp2:::::: cpe:2.3:a:novell:groupwise:7.02:hp2r1:::::: cpe:2.3:a:novell:groupwise:7.03:::::::* cpe:2.3:a:novell:groupwise:7.03:hp:::::: cpe:2.3:a:novell:groupwise:7.03:hp2:::::: cpe:2.3:a:novell:groupwise:7.03:hp3:::::: cpe:2.3:a:novell:groupwise:7.03:hp3+ftf:::::: cpe:2.3:a:novell:groupwise:8.0:::::::* cpe:2.3:a:novell:groupwise:8.00:hp1:::::: cpe:2.3:a:novell:groupwise:8.00:hp2:::::: cpe:2.3:a:novell:groupwise:8.00:hp3:::::: cpe:2.3:a:novell:groupwise:8.01:::::::* cpe:2.3:a:novell:groupwise:8.01:hp:::::: cpe:2.3:a:novell:groupwise:8.02:::::::* cpe:2.3:a:novell:groupwise:8.02:hp1:::::: cpe:2.3:a:novell:groupwise:8.02:hp2:::::: cpe:2.3:a:novell:groupwise:8.02:hp3:::::: cpe:2.3:a:novell:groupwise:8.03:::::::* cpe:2.3:a:novell:groupwise:8.03:hp1:::::: Remediation No remediation found in references.

Product

Versions

novell groupwise

2012

2012 sp1

2012 sp1_hp1

<= 8.03

5.2

CPE

cpe:2.3:a:novell:groupwise:2012:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:2012:sp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:2012:sp1_hp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:*:hp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:5.2:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:5.57e:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.0.1:sp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp3:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp4:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp5:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5:sp6:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5.2:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5.3:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5.4:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5.6:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:6.5.7:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0.3:hp4:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0.3:hp5:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0.4:ftf:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.01:ir1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02:hp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02:hp1a:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02:hp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02:hp2r1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:hp:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:hp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:hp3:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:hp3+ftf:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.00:hp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.00:hp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.00:hp3:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.01:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.01:hp:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.02:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.02:hp1:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.02:hp2:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.02:hp3:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.03:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.03:hp1:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Sep 2, 2017	Modified Analysis	[email protected]
Apr 22, 2013	Initial Analysis	[email protected]