Cross site scripting

The xplat agent in Novell ZENworks Configuration Management ZCM 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing XST attacks via unspecified vectors...

CVE-2012-2223

The xplat agent in Novell ZENworks Configuration Management ZCM 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing XST attacks via unspecified vectors...

CVE-2012-2223: Exposure of Sensitive Information to an Unauthorized Actor

The xplat agent in Novell ZENworks Configuration Management ZCM 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing XST attacks via unspecified vectors...

PT-2012-3890

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management ZCM versions 10.3.x through 10.3.3 Novell ZENworks Configuration Management ZCM versions 11.x through 11.1 Description The issue allows remote attackers to potentially conduct cross-site tracing XST...

Novell ZENworks Configuration Management 10.3 < 10.3.4 Multiple Vulnerabilities

ZENworks Configuration Management, configuration management software from Novell, is installed on the remote Windows host. According to its version, it is affected by several vulnerabilities : - An unspecified vulnerability with regards to the HTTP TRACE method. - An unspecified vulnerability wit...