ZC
Product
Zenworks Configuration Management
On CISA KEVExploited in the wild
35
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 3Medium 3Low 0
Watch
Add Zenworks Configuration Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10.3; 11; 11.1; 11.2; 11.3.0 |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10.3; 11; 11.1; 11.2; 11.3.0 |
| CVE-2015-0786 | 9.8 | Aug 9 | Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2015-0782 | 9.8 | Aug 9 | SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL… Affected: All versions, or not specified |
| CVE-2015-0781 | 9.8 | Aug 9 | Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute… Affected: All versions, or not specified |
| CVE-2015-0780 | 9.8 | Aug 9 | SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute… Affected: All versions, or not specified |
Showing 6