Service Desk (Novell) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2016-04-22. Vendor: Novell.

CVEs of Service Desk

• CVE-2016-1596 - CVSS 5.4 (medium), 2016-04-22: Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web…
• CVE-2016-1595 - CVSS 6.5 (medium), 2016-04-22: LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct…
• CVE-2016-1594 - CVSS 6.5 (medium), 2016-04-22: Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as…
• CVE-2016-1593 - CVSS 7.2 (high), 2016-04-22: Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to…