Novell GroupWise Cross-Site Scripting Vulnerability (CNVD-2017-05134)

Novell GroupWise is a collaborative communication system from Novell. The system provides collaborative communication services such as e-mail, scheduling, instant messaging, task management, document management, and contact management.Document Viewer Agent is one of the document viewers. A...

Cross site scripting

A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid user's browser session by getting the user to click on a specially...

CVE-2016-9169

A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid user's browser session by getting the user to click on a specially...

CVE-2016-9169

The vulnerability CVE-2016-9169 affects the web console of the Document Viewer Agent in Novell GroupWise (older than 2014 R2 Support Pack 1 Hot Patch 2). It is a reflected XSS where a remote attacker can entice a user to click a crafted link, enabling JavaScript execution in the user’s browser se...

CVE-2016-9169

A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid user's browser session by getting the user to click on a specially...

PT-2017-9983

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions prior to 2014 R2 Support Pack 1 Hot Patch 2 Description A reflected XSS issue exists in the web console of the Document Viewer Agent, potentially allowing a remote attacker to execute JavaScript in the context of a...

CVE-2016-9169: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid user's browser session by getting the user to click on a specially...

CVE-2010-4715

CVE-2010-4715 affects Novell GroupWise WebAccess and Document Viewer: multiple directory-traversal vulnerabilities in WebAccess Agent and Document Viewer Agent allow remote attackers to read arbitrary files on vulnerable installations pre-8.02HP. The vectors are unspecified in the provided materi...

PT-2011-1665

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions prior to 8.02HP Description The issue concerns multiple directory traversal vulnerabilities in the WebAccess Agent and Document Viewer Agent components. These vulnerabilities allow remote attackers to read arbitrary...

CVE-2010-4715: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the 1 WebAccess Agent and 2 Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read arbitrary files via unspecified vectors. NOTE: some of these details are obtained from third party information...

Novell GroupWise Document Viewer Agent Web Console Accessible

The remote web server is a Novell GroupWise Document Viewer Agent DVA Web Console. By allowing unauthenticated access to this agent, anyone may be able read status, configuration or log files pertaining to the DVA. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50689...