Vulnerabilities (CVE)

Filtered by vendor Novell Subscribe
Filtered by product Zenworks Configuration Management
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-6344 1 Novell 1 Zenworks Configuration Management 2020-01-27 4.3 MEDIUM 6.1 MEDIUM
Novell ZENworks Configuration Management before 11.2.4 allows XSS.
CVE-2015-0783 1 Novell 1 Zenworks Configuration Management 2017-08-19 4.0 MEDIUM 6.5 MEDIUM
The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.
CVE-2015-5970 1 Novell 1 Zenworks Configuration Management 2016-03-10 5.0 MEDIUM 5.3 MEDIUM
The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and read arbitrary text files, via a malformed query involving a system entity reference.