CVE-2013-1087: Novell Groupwise

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message.

Affected products

• Novell Groupwise: up to and including 8.03; version 6.5 only; version 6.5.2 only; version 6.5.3 only; version 6.5.4 only; version 6.5.6 only; …

Published 2013-07-15. Last modified 2026-06-16.