Novell GroupWise WebAccess Directory.Item Parameters XSS
Low Nessus Plugin ID 56407
SynopsisThe remote host has an application that is affected by a cross-site scripting vulnerability.
DescriptionThe version of Novell GroupWise installed on the remote Windows host is earlier than 8.0.2 HP3. It is, therefore, reportedly affected by a cross-site scripting vulnerability because the application fails to sanitize user-supplied input to the 'Directory.Item.name' and 'Directory.Item.displayName' parameters.
A remote attacker may be able to exploit this vulnerability to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site.
SolutionApply 8.02 Hot Patch 3 or later.