CVE-2016-1595

LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language HQL injection attacks and obtain sensitive information via the entityName parameter...

CVE-2016-1595: Exposure of Sensitive Information to an Unauthorized Actor

LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language HQL injection attacks and obtain sensitive information via the entityName parameter...

PT-2016-4879

Name of the Vulnerable Software and Affected Versions Micro Focus Novell Service Desk versions prior to 7.2 Description The issue allows remote authenticated users to conduct Hibernate Query Language HQL injection attacks and obtain sensitive information. This is achieved via the entityName...

Micro Focus Service Desk HQL Injection Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

Novell Service Desk 7.1.0/7.0.3 / 6.5 - Multiple Vulnerabilities

Exploit for jsp platform in category web applications Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5 Discovered by Pedro Ribeiro email protected, Agile Information Security ================================================================================= Disclosure: 30/03/20...

Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities

Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 30/03/2016 / Last updated: 10/04/2016 Background on the...