ZC
Product
Zenworks Configuration Management
On CISA KEVExploited in the wild
35
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 3Medium 3Low 0
Watch
Add Zenworks Configuration Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10.3; 11; 11.1; 11.2; 11.3.0 |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10.3; 11; 11.1; 11.2; 11.3.0 |
| CVE-2015-0786 | 9.8 | Aug 9 | Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2015-0782 | 9.8 | Aug 9 | SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL… Affected: All versions, or not specified |
| CVE-2015-0781 | 9.8 | Aug 9 | Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute… Affected: All versions, or not specified |
| CVE-2015-0780 | 9.8 | Aug 9 | SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2012-6345 | 7.5 | Jan 25 | Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information Affected: before 11.2.4 |
| CVE-2015-0785 | 7.5 | Aug 9 | com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname… Affected: All versions, or not specified |
| CVE-2015-0784 | 7.5 | Aug 9 | Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance… Affected: All versions, or not specified |
| CVE-2015-0783 | 6.5 | Aug 9 | The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable Affected: All versions, or not specified |
| CVE-2012-6344 | 6.1 | Jan 25 | Novell ZENworks Configuration Management before 11.2.4 allows XSS Affected: before 11.2.4 |
| CVE-2015-5970 | 5.3 | Feb 18 | The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and read arbitrary text… Affected: 11.3.0; 11.3.1; 11.3.2; 11.4.0; 11.4.1 |
| CVE-2015-0779 | – | Jun 7 | Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via… Affected: 11; 11; 11.2; 11.2.1; 11.2.2; 11.2.3 |
| CVE-2010-5324 | – | Jun 7 | Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to… Affected: 10.0; 10.1; 10.2 |
| CVE-2010-5323 | – | Jun 7 | Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to… Affected: 10.0; 10.1; 10.2 |
| CVE-2013-3706 | – | Mar 6 | Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management (ZCM) 11.2 allows remote attackers to read arbitrary files via a Affected: 11.2 |
| CVE-2013-6347 | – | Nov 2 | Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors Affected: through 11.2.3; 10.2; 10.3; 10.3.1; 10.3.2; 10.3.3; +3 more |
| CVE-2013-6346 | – | Nov 2 | Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack the… Affected: through 11.2.3; 10.2; 10.3; 10.3.1; 10.3.2; 10.3.3; +3 more |
| CVE-2013-6345 | – | Nov 2 | Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 has unknown impact and attack vectors related to an "Application… Affected: through 11.2.3; 10.2; 10.3; 10.3.1; 10.3.2; 10.3.3; +3 more |
| CVE-2013-6344 | – | Nov 2 | The ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors Affected: through 11.2.3; 10.2; 10.3; 10.3.1; 10.3.2; 10.3.3; +3 more |
| CVE-2013-1084 | – | Nov 2 | Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers to read arbitrary… Affected: 11.2.3 |
| CVE-2013-1097 | – | Jun 17 | Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers… Affected: 11.2; 11.2.1; 11.2.2; 11.2.3 |
| CVE-2013-1095 | – | Jun 17 | Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers… Affected: 11.2; 11.2.1; 11.2.2; 11.2.3 |
| CVE-2013-1094 | – | Jun 17 | Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote… Affected: 11.2; 11.2.1; 11.2.2; 11.2.3 |
| CVE-2013-1093 | – | Jun 17 | Open redirect vulnerability in the fwdToURL function in the ZCC login page in zcc-framework.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly… Affected: 11.2; 11.2.1; 11.2.2; 11.2.3 |
| CVE-2013-1080 | – | Mar 29 | The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zenworks/jsp/index.jsp, which allows… Affected: 10.3; 11.2 |
| CVE-2013-1079 | – | Mar 29 | Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM)… Affected: 10.3; 10.3.1; 10.3.2; 10.3.3; 11; 11.1; +2 more |
| CVE-2011-3174 | – | Jul 26 | Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM)… Affected: 10.2; 10.3; 11 |
| CVE-2011-2658 | – | Jul 26 | The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx file, which allows… Affected: 10.2; 10.3; 11 |
| CVE-2011-2657 | – | Jul 26 | Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration… Affected: 10.2; 10.3; 11 |
| CVE-2012-2223 | – | Apr 11 | The xplat agent in Novell ZENworks Configuration Management (ZCM) 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote… Affected: 10.3; 10.3.1; 10.3.2; 10.3.3; 11; 11.1; +1 more |
| CVE-2012-2215 | – | Apr 9 | Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to read arbitrary files via an… Affected: 11.1; 11.1a |
| CVE-2011-3176 | – | Apr 9 | Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode… Affected: 11.1; 11.1a |
| CVE-2011-3175 | – | Apr 9 | Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode… Affected: 11.1; 11.1a |
| CVE-2010-4229 | – | Apr 18 | Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before… Affected: 10.3; 10.3.1; 11 |
Showing 35