VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2006· Updated Apr 23, 2026

CVE-2006-4220

CVE-2006-4220

Description

Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web script or HTML via the (1) User.html, (2) Error, (3) User.Theme.index, and (4) and User.lang parameters.

Affected products

6
  • Novell/Groupwise Webaccess
    cpe:2.3:a:novell:groupwise_webaccess:*:*:*:*:*:*:*:*
  • Novell/Groupwise5 versions
    cpe:2.3:a:novell:groupwise:5.57e:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:novell:groupwise:5.57e:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:groupwise:6.5.7:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:groupwise:7.0.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:novell:groupwise:7.0.0:sp2:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.