CVE-2010-2778: XSS

Published Jan 28, 2011

Updated

Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise 7.x before 7.0 post-SP4 FTF and 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to a "Javascript XSS exploit."

Affected Software

6 affected components

Novell GroupWise=7.0-sp1

Novell GroupWise=7.0-sp2

Novell GroupWise=7.0-sp3

Novell GroupWise=7.0-sp4

Novell GroupWise=8.0

Novell GroupWise=8.0-sp1

Event History

Jan 28, 2011

CVE Published

via MITRE·09:13 PM

Data Sourced

via MITRE·09:13 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2778?

CVE-2010-2778 has a moderate severity rating due to its potential for cross-site scripting attacks.

How do I fix CVE-2010-2778?

To fix CVE-2010-2778, update Novell GroupWise to versions 8.0 SP2 or later, or 7.x with the latest post-SP4 FTF.

Who is affected by CVE-2010-2778?

CVE-2010-2778 affects users of Novell GroupWise versions 7.0 and 8.0 prior to their respective service pack updates.

What type of vulnerability is CVE-2010-2778?

CVE-2010-2778 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts.

Can CVE-2010-2778 be exploited remotely?

Yes, CVE-2010-2778 can be exploited remotely, allowing attackers to manipulate users' web sessions.