CVE-2013-1097

Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onload event.

Published: Jun 17, 2013
Updated: Apr 13, 2023
CVE: CVE-2013-1097
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
novell / zenworks_configuration_management	11.2.2	11.2.2.x
novell / zenworks_configuration_management	11.2.3	11.2.3.x
novell / zenworks_configuration_management	11.2	11.2.x
novell / zenworks_configuration_management	11.2.1	11.2.1.x

http://www.novell.com/support/kb/doc.php?id=7012025
http://www.novell.com/support/kb/doc.php?id=7012027
http://www.novell.com/support/kb/doc.php?id=7012502

Vulnerability Database

CVE-2013-1097