CVE-2016-1595

LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language HQL injection attacks and obtain sensitive information via the entityName parameter...

CVE-2016-1596

CVE-2016-1596 affects Micro Focus/Novell Service Desk prior to 7.2, where multiple XSS flaws exist. Remote authenticated users can inject arbitrary web script or HTML via (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4) ta_selectedTopicContent, (5) tf_orgUnitName, (6) tf_aManuf...

Micro Focus Service Desk Cross-Site Scripting Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

Micro Focus Service Desk Arbitrary File Read Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

Micro Focus Service Desk Path Traversal Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

Micro Focus Service Desk HQL Injection Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

Novell Service Desk 7.1.0/7.0.3 / 6.5 - Multiple Vulnerabilities

Exploit for jsp platform in category web applications Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5 Discovered by Pedro Ribeiro email protected, Agile Information Security ================================================================================= Disclosure: 30/03/20...

Novell Service Desk 7.1.0 Code Execution / Information Disclosure

Hi, Novell Service Desk now rebranded as Micro Focus Service Desk 7.1.0 and below has a number of critical vulnerabilities that allow remote code execution, information disclosure, etc, by authenticated users. Check the full advisory below for details. Novell / Micro Focus have documented these...

Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities

Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 30/03/2016 / Last updated: 10/04/2016 Background on the...

Micro Focus Network Automation Detection

Binary data hpnetworkautomationdetect.nbin...

Novell ZENworks Configuration Management < 11.3.2 Remote Code Execution (intrusive check)

The version of Novell ZENworks Configuration Management ZCM running on the remote host is affected by a remote code execution vulnerability due to improper sanitization of user-supplied input to the 'uid' POST parameter in the /zenworks/UploadServlet script. An unauthenticated, remote attacker ca...

HP / Micro Focus SiteScope Detection (HTTP)

HTTP based detection of HP / Micro Focus SiteScope Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Micro Focus / NetIQ Access Manager Detection (HTTP)

HTTP based detection of Micro Focus / NetIQ Access Manager. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Micro Focus / Novell GroupWise Detection (Administration Console)

HTTP based Micro Focus / Novell GroupWise Administration Console. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Micro Focus Cobol 4.1 Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2359/info Micro Focus Cobol is a development suite for unix platforms offered by Merant. It is typically licensed on a per-user basis. If Micro Focus Cobol is installed with the 'Apptrack' feature enabled, local users may...

Novell iPrint Client < 5.82 Remote Code Execution

The version of Novell iPrint Client installed on the remote host is earlier than 5.82. Such versions are affected by an unspecified remote code execution vulnerability that can be triggered via an 'op-client- interface-version' action. C Tenable Network Security, Inc. include"compat.inc"; if...

Micro Focus Enterprise Administration Server Authentication Check

The administration interface for the remote Micro Focus Enterprise Server is accessible without authentication. A remote attacker is able to access potentially sensitive information and modify any settings available through this administration interface. %NASLMINLEVEL 70300 C Tenable Network...

Micro Focus Enterprise Administration Server Detection

The remote web server is a Micro Focus Enterprise Administration Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51838; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Micro Focus Enterprise Administration Server Detection";...

Novell / NetIQ / Micro Focus iManager Detection (HTTP)

HTTP based detection of Novell / NetIQ / Micro Focus iManager. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZENworks Remote Management Agent Detection

The remote host is running ZENworks Remote Management Agent. This program allows a system to be managed remotely by an administrator. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid36088; scriptversion"1.10";...