CVE-2005-1676 - CVE House
Back to Database
Status published Medium CVE-2005-1676

Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allow remote attackers to inject arbitrary web script or HTML via the (1) picture columns embedded within SharePoint lists or (2) drop-down menus in a SharePoint list.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1676

Credits & Attribution

No credits recorded in the NVD database.

References

More from groove

View All →
CVE-2007-6530
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software...
Critical 9.3
CVE-2005-1678
Groove Virtual Office before 3.1 build 2338, before 3.1a build...
Low 2.6
CVE-2005-1677
Unknown vulnerability in Groove Virtual Office before 3.1 build 2338,...
High 7.5
CVE-2005-1675
Groove Virtual Office before 3.1 build 2338, before 3.1a build...
Medium 4.6

Affected Vendor

Affected Software

groove workspace, virtual office
Vulnerable Versions:
0

Timeline

Official Publish: May 25th, 2005
Last Modified: September 16th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.