Zenworks Configuration Management (Novell) - vulnerabilities (CVEs)

35 CVEs, 0 in the last 30 days, 23 known versions, newest CVE from 2020-01-25. Vendor: Novell.

CVEs of Zenworks Configuration Management

CVE-2012-6345 - CVSS 7.5 (high), 2020-01-25: Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.
CVE-2012-6344 - CVSS 6.1 (medium), 2020-01-25: Novell ZENworks Configuration Management before 11.2.4 allows XSS.
CVE-2015-0783 - CVSS 6.5 (medium), 2017-08-09: The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.
CVE-2015-0786 - CVSS 9.8 (critical), 2017-08-09: Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote…
CVE-2015-0782 - CVSS 9.8 (critical), 2017-08-09: SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to…
CVE-2015-0785 - CVSS 7.5 (high), 2017-08-09: com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders…
CVE-2015-0781 - CVSS 9.8 (critical), 2017-08-09: Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload…
CVE-2015-0784 - CVSS 7.5 (high), 2017-08-09: Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for…
CVE-2015-0780 - CVSS 9.8 (critical), 2017-08-09: SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote…
CVE-2015-5970 - CVSS 5.3 (medium), 2016-02-18: The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and…
CVE-2015-0779 - CVSS 10 (critical), 2015-06-07: Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to…
CVE-2010-5324 - CVSS 10 (critical), 2015-06-07: Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows…
CVE-2010-5323 - CVSS 10 (critical), 2015-06-07: Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows…
CVE-2014-7169 - CVSS 9.8 (critical), 2014-09-25: GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows…
CVE-2014-6271 - CVSS 9.8 (critical), 2014-09-24: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute…
CVE-2013-3706 - CVSS 5 (medium), 2014-03-06: Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management (ZCM) 11.2 allows remote attackers to read arbitrary…
CVE-2013-6347 - CVSS 6.8 (medium), 2013-11-02: Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified…
CVE-2013-6345 - CVSS 10 (critical), 2013-11-02: Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 has unknown impact and attack vectors related to an…
CVE-2013-6344 - CVSS 4.3 (medium), 2013-11-02: The ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors.
CVE-2013-6346 - CVSS 6.8 (medium), 2013-11-02: Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to…
CVE-2013-1084 - CVSS 5 (medium), 2013-11-02: Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers…
CVE-2013-1097 - CVSS 4.3 (medium), 2013-06-17: Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1…
CVE-2013-1095 - CVSS 4.3 (medium), 2013-06-17: Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1…
CVE-2013-1094 - CVSS 4.3 (medium), 2013-06-17: Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1…
CVE-2013-1093 - CVSS 5.8 (medium), 2013-06-17: Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before…
CVE-2013-1080 - CVSS 10 (critical), 2013-03-29: The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for…
CVE-2013-1079 - CVSS 6.8 (medium), 2013-03-29: Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks…
CVE-2011-2658 - CVSS 6.8 (medium), 2012-07-26: The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx…
CVE-2011-2657 - CVSS 6.8 (medium), 2012-07-26: Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell…
CVE-2011-3174 - CVSS 6.8 (medium), 2012-07-26: Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks…
CVE-2012-2223 - CVSS 4.3 (medium), 2012-04-11: The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it…
CVE-2012-2215 - CVSS 5 (medium), 2012-04-09: Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to read…
CVE-2011-3176 - CVSS 10 (critical), 2012-04-09: Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute…
CVE-2011-3175 - CVSS 10 (critical), 2012-04-09: Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute…
CVE-2010-4229 - CVSS 10 (critical), 2011-04-18: Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration…