novell zenworks configuration management - vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Novell Zenworks Configuration Management -

9.8

CVSSv3

Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote malicious users to upload and execute arbitrary files via unspecified vectors.

Novell Zenworks Configuration Management -

9.8

CVSSv3

Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote malicious users to execute arbitrary code via unspecified vectors.

Novell Zenworks Configuration Management -

9.8

CVSSv3

SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Novell Zenworks Configuration Management -

7.5

CVSSv3

Novell ZENworks Configuration Management prior to 11.2.4 allows obtaining sensitive trace information.

Novell Zenworks Configuration Management

7.5

CVSSv3

Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote malicious users to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.

Novell Zenworks Configuration Management -

7.5

CVSSv3

com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote malicious users to read arbitrary folders via the dirname variable.

Novell Zenworks Configuration Management -

6.5

CVSSv3

The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.

Novell Zenworks Configuration Management -

6.1

CVSSv3

Novell ZENworks Configuration Management prior to 11.2.4 allows XSS.

Novell Zenworks Configuration Management

5.3

CVSSv3

The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote malicious users to conduct XPath injection attacks, and read arbitrary text files, via a malformed query involving a system entity reference.

Novell Zenworks Configuration Management 11.4.0 Novell Zenworks Configuration Management 11.3.2 Novell Zenworks Configuration Management 11.3.1 Novell Zenworks Configuration Management 11.3.0 Novell Zenworks Configuration Management 11.4.1

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook