Lucene search

[email protected]CVE-2005-1676

HistoryMay 20, 2005 - 4:00 a.m.

CVE-2005-1676

2005-05-2004:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-1676

cross-site scripting

xss

groove mobile workspace

groove virtual office

sharepoint

nvd

5.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list.

CPENameOperatorVersion
groove:virtual_officegroove virtual officele3.1a_build_2364
groove:virtual_officegroove virtual officele3.1_build_2338
groove:groove_workspacegroove groove workspacele2.5n_build_1871

CPE	Name	Operator	Version
groove:virtual_office	groove virtual office	le	3.1a_build_2364
groove:virtual_office	groove virtual office	le	3.1_build_2338
groove:groove_workspace	groove groove workspace	le	2.5n_build_1871

References

secunia.com/advisories/15421

www.kb.cert.org/vuls/id/372618

www.kb.cert.org/vuls/id/514386

www.kb.cert.org/vuls/id/JGEI-6BCRCC

5.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

71.7%

JSON

Related for CVE-2005-1676

cert1 nessus1 kaspersky1