CVE-2009-1635

N/A Unknown
Published: May 22, 2009 Modified: April 23, 2026
View on NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject arbitrary web script or HTML via (1) the User.lang parameter to the login page (aka gw/webacc), (2) style expressions in a message that contains an HTML file, or (3) vectors associated with incorrect protection mechanisms against scripting, as demonstrated using whitespace between JavaScript event names and values.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt
Source: cve@mitre.org
http://secunia.com/advisories/35177
Source: cve@mitre.org
http://securitytracker.com/id?1022267
Source: cve@mitre.org
http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271
Source: cve@mitre.org
Patch Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=7003267&sliceId=1
Source: cve@mitre.org
http://www.novell.com/support/viewContent.do?externalId=7003268&sliceId=1
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/503700/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/503885/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/35061
Source: cve@mitre.org
http://www.securityfocus.com/bid/35066
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2009/1393
Source: cve@mitre.org
https://bugzilla.novell.com/show_bug.cgi?id=472987
Source: cve@mitre.org
https://bugzilla.novell.com/show_bug.cgi?id=474500
Source: cve@mitre.org
https://bugzilla.novell.com/show_bug.cgi?id=484942
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/50672
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/50689
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/50691
Source: cve@mitre.org
http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/35177
Source: af854a3a-2127-422b-91ae-364da2661108
http://securitytracker.com/id?1022267
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=7003267&sliceId=1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.novell.com/support/viewContent.do?externalId=7003268&sliceId=1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/503700/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/503885/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/35061
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/35066
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2009/1393
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.novell.com/show_bug.cgi?id=472987
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.novell.com/show_bug.cgi?id=474500
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.novell.com/show_bug.cgi?id=484942
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/50672
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/50689
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/50691
Source: af854a3a-2127-422b-91ae-364da2661108

34 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.4%
61th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-79

Affected Vendors

novell

Related CVEs

CVE-2026-7041 3.7
CVE-2026-7039 7.8
CVE-2026-7038 3.3
CVE-2026-7037 9.8
CVE-2026-7036 7.3