Vulnerability Name:

CVE-2013-1087 (CCN-85876)

Assigned:2013-04-16
Published:2013-04-16
Updated:2013-07-16
Summary:Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message.
Per: http://www.novell.com/support/kb/doc.php?id=7012063

'Previous versions (GroupWise, 6.5, 7.x) of the GroupWise Client for Windows are likely also vulnerable but are no longer supported. Customers on earlier versions of GroupWise should, at a minimum, upgrade their GroupWise Windows clients to version 8.0.3 Hot Patch 3 or 2012 SP2 in order to secure their systems.'

CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-79
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2013-1087

Source: CCN
Type: Novell Document ID 7012063
GroupWise Client for Windows Cross-site Scripting (XSS) Vulnerability

Source: CONFIRM
Type: Vendor Advisory
http://www.novell.com/support/kb/doc.php?id=7012063

Source: CCN
Type: BID-61188
Novell GroupWise Client CVE-2013-1087 Cross-Site Scripting Vulnerability

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.novell.com/show_bug.cgi?id=799673

Source: XF
Type: UNKNOWN
novell-groupwise-cve20131087-xss(85876)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:novell:groupwise:6.5:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp3:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp4:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp5:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp6:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5.2:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5.3:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5.4:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5.6:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5.7:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.0:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.0.3:hp4:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.0.3:hp5:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.0.4:ftf:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.01:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.01:ir1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.02:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.02:hp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.02:hp1a:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.02:hp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.02:hp2r1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.03:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.03:hp:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.03:hp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.03:hp3:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.03:hp3+ftf:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.0:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.00:hp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.00:hp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.00:hp3:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.01:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.01:hp:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.02:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.02:hp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.02:hp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.02:hp3:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.03:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.03:hp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.03:hp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:*:hp3:*:*:*:*:*:* (Version <= 8.03)
  • OR cpe:/a:novell:groupwise:2012:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:2012:sp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:2012:sp1_hp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:2012:sp2:*:*:*:*:*:*
  • AND
  • cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:novell:groupwise:6.5:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5.2:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5.3:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.0:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.02:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.01:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5.4:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5.6:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5.7:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp3:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp4:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp5:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:6.5:sp6:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.03:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.0:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.03:hp3:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.01:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.02:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.02:hp3:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.03:hp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.03:hp3:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.03:hp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.03:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.01:hp:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.00:hp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.00:hp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.02:hp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.02:hp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:8.00:hp3:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.03:hp:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.02:hp2r1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.02:hp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.03:hp2:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.0.4:ftf:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.0.3:hp5:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.0.3:hp4:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.02:hp1a:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.02:hp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:7.01:ir1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:2012:*:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:2012:sp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:2012:sp1_hp1:*:*:*:*:*:*
  • OR cpe:/a:novell:groupwise:2012:sp2:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    novell groupwise 6.5
    novell groupwise 6.5 sp1
    novell groupwise 6.5 sp2
    novell groupwise 6.5 sp3
    novell groupwise 6.5 sp4
    novell groupwise 6.5 sp5
    novell groupwise 6.5 sp6
    novell groupwise 6.5.2
    novell groupwise 6.5.3
    novell groupwise 6.5.4
    novell groupwise 6.5.6
    novell groupwise 6.5.7
    novell groupwise 7.0
    novell groupwise 7.0.3 hp4
    novell groupwise 7.0.3 hp5
    novell groupwise 7.0.4
    novell groupwise 7.0.4 ftf
    novell groupwise 7.01
    novell groupwise 7.01 ir1
    novell groupwise 7.02
    novell groupwise 7.02 hp1
    novell groupwise 7.02 hp1a
    novell groupwise 7.02 hp2
    novell groupwise 7.02 hp2r1
    novell groupwise 7.03
    novell groupwise 7.03 hp
    novell groupwise 7.03 hp2
    novell groupwise 7.03 hp3
    novell groupwise 7.03 hp3+ftf
    novell groupwise 8.0
    novell groupwise 8.00 hp1
    novell groupwise 8.00 hp2
    novell groupwise 8.00 hp3
    novell groupwise 8.01
    novell groupwise 8.01 hp
    novell groupwise 8.02
    novell groupwise 8.02 hp1
    novell groupwise 8.02 hp2
    novell groupwise 8.02 hp3
    novell groupwise 8.03
    novell groupwise 8.03 hp1
    novell groupwise 8.03 hp2
    novell groupwise * hp3
    novell groupwise 2012
    novell groupwise 2012 sp1
    novell groupwise 2012 sp1_hp1
    novell groupwise 2012 sp2
    microsoft windows *
    novell groupwise 6.5
    novell groupwise 6.5.2
    novell groupwise 6.5.3
    novell groupwise 7.0
    novell groupwise 7.02
    novell groupwise 7.01
    novell groupwise 6.5.4
    novell groupwise 6.5.6
    novell groupwise 6.5.7
    novell groupwise 6.5 sp1
    novell groupwise 6.5 sp2
    novell groupwise 6.5 sp3
    novell groupwise 6.5 sp4
    novell groupwise 6.5 sp5
    novell groupwise 6.5 sp6
    novell groupwise 7.03
    novell groupwise 8.0
    novell groupwise 7.03 hp3
    novell groupwise 8.01
    novell groupwise 8.02
    novell groupwise 8.02 hp3
    novell groupwise 8.03 hp2
    novell groupwise 8.03 hp3
    novell groupwise 8.03 hp1
    novell groupwise 8.03
    novell groupwise 8.01 hp
    novell groupwise 8.00 hp1
    novell groupwise 8.00 hp2
    novell groupwise 8.02 hp2
    novell groupwise 8.02 hp1
    novell groupwise 8.00 hp3
    novell groupwise 7.0.4
    novell groupwise 7.03 hp
    novell groupwise 7.02 hp2r1
    novell groupwise 7.02 hp2
    novell groupwise 7.03 hp2
    novell groupwise 7.0.4 ftf
    novell groupwise 7.0.3 hp5
    novell groupwise 7.0.3 hp4
    novell groupwise 7.02 hp1a
    novell groupwise 7.02 hp1
    novell groupwise 7.01 ir1
    novell groupwise 2012
    novell groupwise 2012 sp1
    novell groupwise 2012 sp1_hp1
    novell groupwise 2012 sp2