CVE-2012-0419

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before...

5.0 Medium

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitrary files via directory traversal sequences in a request.

Exploit likelihood

42.5%Down 18.7 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2012-0419
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-0419
Updated: 2026-11-02

EUVDEUVD-2012-0451 No score

Record: EUVD-2012-0451
Updated: 2026-11-03

GitHub AdvisoriesGHSA-74qq-vpp5-grmv No score

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before...

Record: GHSA-74qq-vpp5-grmv
Weakness: CWE-22
Updated: 2026-11-02

Affected products

novell groupwise

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Novell Groupwise Agents HTTP Directory Traversal

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0419 is a medium vulnerability (CVSS 5.0) in Novell Groupwise, published September 28, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 42.5%, the 98th percentile. No source names a fixed version.