SD
Product
Service Desk
by Novell · last CVE Apr 22, 2016
4
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch

Add Service Desk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-1593
7.2
64%
Apr 22
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute…
Affected: through 7.1
CVE-2016-1595
6.5
7%
Apr 22
LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language…
Affected: through 7.1
CVE-2016-1594
6.5
7%
Apr 22
Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining…
Affected: through 7.1
CVE-2016-1596
5.4
2%
Apr 22
Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a…
Affected: through 7.1
Showing 4