GCVE - cpe:2.3:a:novell:data_synchronizer:1.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:novell:data_synchronizer:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

Vendor	Novell (`4a1c187d-e568-531f-92b0-685a3df2807c`)
Product	Data Synchronizer (`0ad9f367-a6c7-5591-9486-0f323848b26b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-3014`	vulnerable	2026-06-08 04:58:10.299111	Details available The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation. Published: 2011-08-09T22:00:00.000Z Updated: 2024-08-06T23:22:26.676Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/69167 http://www.novell.com/support/viewContent.do?externalId=7009057	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3013`	vulnerable	2026-06-08 04:58:10.298426	Details available WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-force attack. Published: 2011-08-09T22:00:00.000Z Updated: 2024-08-06T23:22:27.343Z Open on db.gcve.eu Reference links http://www.novell.com/support/viewContent.do?externalId=7009056 https://exchange.xforce.ibmcloud.com/vulnerabilities/69168	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2224`	vulnerable	2026-06-08 04:58:04.876692	Details available The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors. Published: 2011-08-09T22:00:00.000Z Updated: 2024-08-06T22:53:17.543Z Open on db.gcve.eu Reference links http://secunia.com/advisories/45527 http://www.novell.com/support/viewContent.do?externalId=7009058 http://www.securityfocus.com/bid/49069	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2223`	vulnerable	2026-06-08 04:58:04.876211	Details available The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network. Published: 2011-08-09T22:00:00.000Z Updated: 2024-08-06T22:53:17.426Z Open on db.gcve.eu Reference links http://secunia.com/advisories/45527 http://www.novell.com/support/viewContent.do?externalId=7009055 http://www.securityfocus.com/bid/49069	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2222`	vulnerable	2026-06-08 04:58:04.875712	Details available Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to hijack web sessions via unspecified vectors. Published: 2011-08-09T22:00:00.000Z Updated: 2024-08-06T22:53:17.537Z Open on db.gcve.eu Reference links http://secunia.com/advisories/45527 http://www.novell.com/support/viewContent.do?externalId=7009054 http://www.securityfocus.com/bid/49069	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2221`	vulnerable	2026-06-08 04:58:04.870935	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1711`	vulnerable	2026-06-08 04:58:01.566308	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.