4 matches found
CVE-2012-4912
CVE-2012-4912 describes an XSS vulnerability in the Novell GroupWise WebAccess component. Affected products include GroupWise 8.x prior to 8.0.3 SP, and 2012 versions prior to SP1. The issue allows remote attackers to inject arbitrary web script or HTML via a crafted HTML email signature, leading...
CVE-2007-1119: Undefined Security Weakness
Unspecified vulnerability in Novell ZENworks 7 Desktop Management Support Pack 1 before Hot patch 3 ZDM7SP1HP3 allows remote attackers to upload images to certain folders that were not configured in the "Only allow uploads to the following directories" setting via unspecified vectors...
CVE-2003-0635
Novell iChain 2.2 before Support Pack 1 is listed as vulnerable, with unknown impact and potentially related to unauthorized access to (1) NCPIP.NLM and (2) JSTCP.NLM. The available records do not disclose the root cause, real-world exploit scenarios, or a confirmed impact. Details across connect...
CVE-2003-0636: Undefined Security Weakness
Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites...