Novell : Security Vulnerabilities, CVEs, Published In 2013 (XSS)
The ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors.
Max CVSS
4.3
EPSS Score
0.07%
Published
2013-11-02
Updated
2013-11-05
Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onload event.
Max CVSS
4.3
EPSS Score
0.18%
Published
2013-06-17
Updated
2013-11-07
Cross-site scripting (XSS) vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via a taskDetail taskId.
Max CVSS
4.3
EPSS Score
1.43%
Published
2013-12-28
Updated
2015-07-29
Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError event.
Max CVSS
4.3
EPSS Score
0.18%
Published
2013-06-17
Updated
2013-11-07
Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via an invalid locale.
Max CVSS
4.3
EPSS Score
0.18%
Published
2013-06-17
Updated
2013-11-07
Cross-site scripting (XSS) vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message.
Max CVSS
4.3
EPSS Score
0.30%
Published
2013-07-15
Updated
2013-07-16
Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError attribute.
Max CVSS
4.3
EPSS Score
0.52%
Published
2013-04-19
Updated
2017-09-02
Cross-site scripting (XSS) vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE Linux Enterprise (SLE) 11 SP1 allows remote attackers to inject arbitrary web script or HTML via an image name.
Max CVSS
4.3
EPSS Score
5.49%
Published
2013-12-02
Updated
2014-03-04
8 vulnerabilities found