CVE-2013-1094

Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via an invalid locale.

Published: Jun 17, 2013
Updated: Apr 13, 2023
CVE: CVE-2013-1094
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
novell / zenworks_configuration_management	11.2.2	11.2.2.x
novell / zenworks_configuration_management	11.2.3	11.2.3.x
novell / zenworks_configuration_management	11.2	11.2.x
novell / zenworks_configuration_management	11.2.1	11.2.1.x

http://www.novell.com/support/kb/doc.php?id=7012025
http://www.novell.com/support/kb/doc.php?id=7012027
http://www.novell.com/support/kb/doc.php?id=7012501

Vulnerability Database

CVE-2013-1094