{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-09-16T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1022910", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1022910"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.novell.com/support/viewContent.do?externalId=7004410&sliceId=1"}, {"name": "ADV-2009-2689", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/2689"}, {"name": "groupwise-webaccess-userthemeindex-xss(53322)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53322"}, {"name": "36746", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/36746"}, {"name": "36437", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/36437"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2009-4662", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1022910", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1022910"}, {"name": "http://www.novell.com/support/viewContent.do?externalId=7004410&sliceId=1", "refsource": "CONFIRM", "url": "http://www.novell.com/support/viewContent.do?externalId=7004410&sliceId=1"}, {"name": "ADV-2009-2689", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/2689"}, {"name": "groupwise-webaccess-userthemeindex-xss(53322)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53322"}, {"name": "36746", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/36746"}, {"name": "36437", "refsource": "BID", "url": "http://www.securityfocus.com/bid/36437"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T07:08:38.107Z"}, "title": "CVE Program Container", "references": [{"name": "1022910", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1022910"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.novell.com/support/viewContent.do?externalId=7004410&sliceId=1"}, {"name": "ADV-2009-2689", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/2689"}, {"name": "groupwise-webaccess-userthemeindex-xss(53322)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53322"}, {"name": "36746", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/36746"}, {"name": "36437", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/36437"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-4662", "datePublished": "2010-03-03T20:00:00", "dateReserved": "2010-03-03T00:00:00", "dateUpdated": "2024-08-07T07:08:38.107Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "FE640E9A-762B-4AF4-8677-818CBF16EA4E", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:groupwise:7.0:sp1:*:*:*:*:*:*", "matchCriteriaId": "A9FBB457-FDC0-485F-951A-C0A7661A92B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:groupwise:7.0:sp2:*:*:*:*:*:*", "matchCriteriaId": "8661AFFB-5CAF-4D44-A617-E0330C764BDE", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:groupwise:7.0:sp3:*:*:*:*:*:*", "matchCriteriaId": "CF66EFEE-DAB2-4455-96F2-50D3E9456485", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*", "matchCriteriaId": "86DB474F-D101-4210-9DC1-7230E9CAE80D", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*", "matchCriteriaId": "1D75C8A8-8162-4160-9295-2DA4D710AD58", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C52E2ABC-20AE-437A-83B0-2E0753787FB5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter."}, {"lang": "es", "value": "Vulnerabilidad de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en el componente WebAccess en Novell GroupWise v7.0 anterior a v7.03 HP4 y v8.0 anterior a v8.0 SP1, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elecci\u00f3n a trav\u00e9s del par\u00e1metro User.Theme.index."}], "id": "CVE-2009-4662", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": true}]}, "published": "2010-03-03T20:30:00.557", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/36746"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://www.novell.com/support/viewContent.do?externalId=7004410&sliceId=1"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/36437"}, {"source": "[email protected]", "url": "http://www.securitytracker.com/id?1022910"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2009/2689"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53322"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/36746"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.novell.com/support/viewContent.do?externalId=7004410&sliceId=1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/36437"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1022910"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2009/2689"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53322"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "[email protected]", "type": "Primary"}]}

{}