CVE-2004-2103 — Cross-site Scripting in Netware

3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 60.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Netware
Timeline
PublishedDec 31
Latest updateApr 29

Description

Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via (1) a malformed request for a Perl program with script in the filename, (2) the User.id parameter to the webacc servlet, (3) the GWAP.version parameter to webacc, or (4) a URL request for a .bas file with script in the filename.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDnovell/netware5.1, 6.0+1

🔴Vulnerability Details

2
GHSA
GHSA-vhj4-jgw5-6cm4: Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5↗2022-04-29
▶
CVEList
CVE-2004-2103: Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5↗2005-05-27
▶
CVE-2004-2103 — Cross-site Scripting in Novell Netware | cvebase