Search/CVE-2007-4557

● CVE

CVE-2007-4557

Cross-site scripting (XSS) vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, as demonstrated by a URL within a url field in a STYLE element, possibly due to an incomplete fix for CVE-2004-2103.2.

View graph Watch Export

CVSS v3.1

—

EPSS

0.95%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Connections

2 relationships

Timeline

disclosure → media coverage

Aug 28, 2007

Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026