CVE-2011-2661

No fix known EPSS <1%

Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter.

Published 2011-10-08 · CVE record · OSV

Products: novell groupwise