Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-38756

CVE-2022-38756 vulnerability in GW Web prior to 18.4.2

A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Groupwise
CVE-2018-12468

Arbitrary File Upload in GroupWise Administration Console

A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remote code execution.

CVSS 3.0 · 9.1 Critical EPSS 2.2% KEV · Not listed
Vendors
Microfocus
Products
Groupwise