Zenworks Configuration Management
Approved changes feed: RSS · Atom
cpe:2.3:a:novell:zenworks_configuration_management:11.2.1:*:*:*:*:*:*:*
part: a version: 11.2.1 update: *
| Vendor | Novell (4a1c187d-e568-531f-92b0-685a3df2807c) |
|---|---|
| Product | Zenworks Configuration Management (8d98cd63-36d5-554b-8808-ba56f7c70be8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-0779 |
vulnerable | 2026-06-08 05:06:22.907960 |
Details available
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323 and CVE-2010-5324.
Published: 2015-06-07T23:00:00.000Z
Updated: 2024-08-06T04:26:09.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1097 |
vulnerable | 2026-06-08 05:03:52.447082 |
Details available
Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onload event.
Published: 2013-06-17T10:00:00.000Z
Updated: 2024-08-06T14:49:20.691Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1095 |
vulnerable | 2026-06-08 05:03:52.446465 |
Details available
Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError event.
Published: 2013-06-17T10:00:00.000Z
Updated: 2024-08-06T14:49:20.648Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1094 |
vulnerable | 2026-06-08 05:03:52.446078 |
Details available
Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via an invalid locale.
Published: 2013-06-17T10:00:00.000Z
Updated: 2024-08-06T14:49:20.619Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1093 |
vulnerable | 2026-06-08 05:03:52.444566 |
Details available
Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the directToPage parameter.
Published: 2013-06-17T10:00:00.000Z
Updated: 2024-08-06T14:49:20.666Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.