Approved changes feed: RSS · Atom

cpe:2.3:a:novell:zenworks_configuration_management:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductZenworks Configuration Management (8d98cd63-36d5-554b-8808-ba56f7c70be8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0786 vulnerable 2026-06-08 05:06:22.913220 Details available
Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary code via unspecified vectors.
Published: 2017-08-09T18:00:00.000Z
Updated: 2024-08-06T04:26:10.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0785 vulnerable 2026-06-08 05:06:22.912918 Details available
com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.
Published: 2017-08-09T18:00:00.000Z
Updated: 2024-08-06T04:26:09.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0784 vulnerable 2026-06-08 05:06:22.912640 Details available
Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.
Published: 2017-08-09T18:00:00.000Z
Updated: 2024-08-06T04:26:09.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0783 vulnerable 2026-06-08 05:06:22.912329 Details available
The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.
Published: 2017-08-09T18:00:00.000Z
Updated: 2024-08-06T04:26:09.839Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0782 vulnerable 2026-06-08 05:06:22.912030 Details available
SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2017-08-09T18:00:00.000Z
Updated: 2024-08-06T04:26:09.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0781 vulnerable 2026-06-08 05:06:22.911715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0780 vulnerable 2026-06-08 05:06:22.911316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.