Unrated severityNVD Advisory· Published May 20, 2005· Updated Apr 16, 2026

CVE-2005-1676

Description

Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list.

Affected products

Groove/Groove Workspace
cpe:2.3:a:groove:groove_workspace:*:*:*:*:*:*:*:*
Range: <=2.5n_build_1871
Groove/Virtual Office
cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*
Range: <=3.1_build_2338

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/15421nvdPatchVendor Advisory
www.kb.cert.org/vuls/id/372618nvdThird Party AdvisoryUS Government Resource
www.kb.cert.org/vuls/id/514386nvdThird Party AdvisoryUS Government Resource
www.kb.cert.org/vuls/id/JGEI-6BCRCCnvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000