CVE-2013-1094: XSS
Published Jun 17, 2013
·Updated
Cross-site scripting (XSS) vulnerability in a ZCC page in zenworks-core in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via an invalid locale.
Affected Software
4 affected components
Novell ZENworks Configuration Management=11.2
Novell ZENworks Configuration Management=11.2.1
Novell ZENworks Configuration Management=11.2.2
Novell ZENworks Configuration Management=11.2.3
Event History
Jun 17, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1094?
CVE-2013-1094 has a medium severity rating due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2013-1094?
To fix CVE-2013-1094, update Novell ZENworks Configuration Management to version 11.2.3a or later.
3
What systems are affected by CVE-2013-1094?
CVE-2013-1094 affects Novell ZENworks Configuration Management versions 11.2 through 11.2.2.
4
What type of vulnerability is CVE-2013-1094?
CVE-2013-1094 is a cross-site scripting (XSS) vulnerability that allows remote script injection.
5
Can CVE-2013-1094 be exploited remotely?
Yes, CVE-2013-1094 can be exploited remotely by attackers injecting scripts via invalid locale inputs.