Cross site scripting

2013-06-1711:38:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.9%

JSON

Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via an invalid locale.

CPENameOperatorVersion
zenworks_configuration_managementeq11.2.2
zenworks_configuration_managementeq11.2.3
zenworks_configuration_managementeq11.2
zenworks_configuration_managementeq11.2.1

Name	Operator	Version
zenworks_configuration_management	eq	11.2.2
zenworks_configuration_management	eq	11.2.3
zenworks_configuration_management	eq	11.2
zenworks_configuration_management	eq	11.2.1