Unscored severity · published May 20, 2005
CVE-2005-1676
Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before…
–
CVSS
3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GW
Groove Workspace · Groove
through 2.5n_build_1871 · source: NVD
VO
Virtual Office · Groove
through 3.1_build_2338; through 3.1a_build_2364 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1676
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1676
Patch
http://secunia.com/advisories/15421
Third Party Advisory
http://www.kb.cert.org/vuls/id/372618
Third Party Advisory
http://www.kb.cert.org/vuls/id/514386
Third Party Advisory
http://www.kb.cert.org/vuls/id/JGEI-6BCRCC
More from Groove Workspace
–
CVE-2005-1675
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure…
–
CVE-2005-1677
Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass…
–
CVE-2005-1678
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded…