Novell Zenworks Configuration Management vulnerabilities
28 known vulnerabilities affecting novell/zenworks_configuration_management.
Total CVEs
28
CISA KEV
2
actively exploited
Public exploits
10
Exploited in wild
2
Severity breakdown
CRITICAL10HIGH1MEDIUM17
Vulnerabilities
Page 2 of 2
CVE-2013-6346P4MEDIUMCVSS 6.8≤ 11.2.3v10.2+6 more2013-11-02
CVE-2013-6346 [MEDIUM] CWE-352 CVE-2013-6346: Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Man
Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
nvd
CVE-2012-6344P4MEDIUMCVSS 6.1fixed in 11.2.42020-01-25
CVE-2012-6344 [MEDIUM] CWE-79 CVE-2012-6344: Novell ZENworks Configuration Management before 11.2.4 allows XSS.
Novell ZENworks Configuration Management before 11.2.4 allows XSS.
nvd
CVE-2013-1093P4MEDIUMCVSS 5.8v11.2v11.2.1+2 more2013-06-17
CVE-2013-1093 [MEDIUM] CWE-20 CVE-2013-1093: Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in N
Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the directToPage parameter.
nvd
CVE-2012-2223P4MEDIUMCVSS 4.3v10.3v10.3.1+5 more2012-04-11
CVE-2012-2223 [MEDIUM] CWE-200 CVE-2012-2223: The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x befo
The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing (XST) attacks via unspecified vectors.
nvd
CVE-2013-1094P4MEDIUMCVSS 4.3v11.2v11.2.1+2 more2013-06-17
CVE-2013-1094 [MEDIUM] CWE-79 CVE-2013-1094: Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configura
Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via an invalid locale.
nvd
CVE-2013-1097P4MEDIUMCVSS 4.3v11.2v11.2.1+2 more2013-06-17
CVE-2013-1097 [MEDIUM] CWE-79 CVE-2013-1097: Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration
Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onload event.
nvd
CVE-2013-1095P4MEDIUMCVSS 4.3v11.2v11.2.1+2 more2013-06-17
CVE-2013-1095 [MEDIUM] CWE-79 CVE-2013-1095: Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration
Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError event.
nvd
CVE-2013-6344P4MEDIUMCVSS 4.3≤ 11.2.3v10.2+6 more2013-11-02
CVE-2013-6344 [MEDIUM] CWE-79 CVE-2013-6344: The ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows attackers to con
The ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors.
nvd
← Previous2 / 2