CVE-2014-0600: FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers...

Security readout for executives and security teams

CVE-2014-0600 affects Novell GroupWise 2014 before SP1. A vulnerable Administration service servlet could let a remote attacker read or write arbitrary files. That creates serious confidentiality and integrity risk if the administration service is reachable. The provided sources do not confirm active exploitation. Exposure is most likely where Novell GroupWise 2014 Administration service exists, especially versions before SP1. Risk depends on network reachability of that administration interface and any access controls not described in the sources. Prioritize remediation for any internet-facing or broadly reachable GroupWise 2014 Administration service. Even without confirmed exploitation, arbitrary file read/write against an administration component can threaten mail system confidentiality and operational integrity. Mitigation focus: Upgrade Novell GroupWise 2014 to SP1 or later where applicable.; Review Novell guidance for any additional vendor-required remediation.; Restrict network access to the GroupWise Administration service..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.