CVE-2016-9169: XSS

Published Mar 23, 2017

Updated

A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid user's browser session by getting the user to click on a specially crafted link. This could lead to session compromise or other browser-based attacks.

Affected Software

1 affected component

Novell GroupWise=2014-r2_sp1

Event History

Mar 23, 2017

CVE Published

via MITRE·06:36 AM

Data Sourced

via MITRE·06:36 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-9169?

CVE-2016-9169 has a moderate severity rating due to its potential for reflected XSS attacks.

How do I fix CVE-2016-9169?

To fix CVE-2016-9169, update to Novell GroupWise version 2014 R2 Support Pack 1 Hot Patch 2 or later.

What systems are affected by CVE-2016-9169?

CVE-2016-9169 affects the Document Viewer Agent in Novell GroupWise versions before 2014 R2 Support Pack 1 Hot Patch 2.

What type of vulnerability is CVE-2016-9169?

CVE-2016-9169 is a reflected Cross-Site Scripting (XSS) vulnerability.

Can CVE-2016-9169 allow attackers to execute scripts?

Yes, CVE-2016-9169 may enable attackers to execute JavaScript in the context of a valid user's browser session.