Security Advisory

CVE-2016-9169

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-03-23 06:36:00

Last updated 2024-08-06 02:42:10

Assigner microfocus

State PUBLISHED

Description

A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid users browser session by getting the user to click on a specially crafted link. This could lead to session compromise or other browser-based attacks.

← Browse all CVEs View on cve.org ↗