What’s Vulnerable › Vulnerabilities

CVE-2014-0600

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-08-29 · updated 2026-06-17
• Weakness: CWE-200

Description

FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287.

Affected products

• Novell GroupWise: 2014

References

• http://www.novell.com/support/kb/doc.php?id=7015566
• http://www.securitytracker.com/id/1030801
• http://www.zerodayinitiative.com/advisories/ZDI-14-296/
• https://bugzilla.novell.com/show_bug.cgi?id=879192
• http://www.novell.com/support/kb/doc.php?id=7015566
• http://www.securitytracker.com/id/1030801
• http://www.zerodayinitiative.com/advisories/ZDI-14-296/
• https://bugzilla.novell.com/show_bug.cgi?id=879192

Get alerted when CVE-2014-0600 or the next vulnerability affects your stack