CVE-2007-4557: XSS

Published Aug 28, 2007

Updated

Cross-site scripting (XSS) vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, as demonstrated by a URL within a url field in a STYLE element, possibly due to an incomplete fix for CVE-2004-2103.2.

Affected Software

1 affected component

Novell Groupwise WebAccess=6.5

Event History

Aug 28, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4557?

CVE-2007-4557 is classified as a medium-severity cross-site scripting vulnerability.

How do I fix CVE-2007-4557?

To remediate CVE-2007-4557, ensure that the software is updated to a version where this vulnerability has been patched.

What software is affected by CVE-2007-4557?

CVE-2007-4557 specifically affects Novell GroupWise WebAccess version 6.5.

What type of attacks can exploit CVE-2007-4557?

CVE-2007-4557 allows remote attackers to execute arbitrary web scripts or HTML through cross-site scripting.

Is the issue in CVE-2007-4557 a complete fix for a prior vulnerability?

CVE-2007-4557 is believed to be due to an incomplete fix for the earlier vulnerability CVE-2004-21.