CVE-2009-0272: Novell Groupwise

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote attackers to insert e-mail forwarding rules, and modify unspecified other configuration settings, as arbitrary users via unknown vectors.

Affected products

• Novell Groupwise: version 6.5 only; version 7.0 only; version 7.01 only; version 7.02x only; version 7.03 only; version 8.0 only

Published 2009-02-02. Last modified 2026-06-16.