Approved changes feed: RSS · Atom

cpe:2.3:a:novell:zenworks_configuration_management:10.3.3:*:*:*:*:*:*:*

part: a version: 10.3.3 update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductZenworks Configuration Management (8d98cd63-36d5-554b-8808-ba56f7c70be8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6347 vulnerable 2026-06-08 05:04:56.025591 Details available
Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors.
Published: 2013-11-02T20:00:00.000Z
Updated: 2024-09-16T18:14:21.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6346 vulnerable 2026-06-08 05:04:56.025146 Details available
Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published: 2013-11-02T20:00:00.000Z
Updated: 2024-09-17T01:20:41.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6345 vulnerable 2026-06-08 05:04:56.024711 Details available
Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 has unknown impact and attack vectors related to an "Application Exception."
Published: 2013-11-02T20:00:00.000Z
Updated: 2024-09-16T20:32:14.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6344 vulnerable 2026-06-08 05:04:56.022700 Details available
The ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors.
Published: 2013-11-02T20:00:00.000Z
Updated: 2024-09-16T18:19:04.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1079 vulnerable 2026-06-08 05:03:52.365960 Details available
Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method.
Published: 2013-03-29T10:00:00.000Z
Updated: 2024-09-16T16:52:44.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2223 vulnerable 2026-06-08 05:00:53.376988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.