PT-2017-8769

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions prior to 2014 R2 Service Pack 1 Hot Patch 1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrator console. These vulnerabilities allow remote attackers to inject arbitra...

CVE-2016-5760: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject arbitrary web script or HTML via the 1 token parameter to gwadmin-console/install/login.jsp or 2 PATHINFO to...