CVE-2013-1095: XSS

Published Jun 17, 2013

Updated

Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError event.

Affected Software

4 affected components

Novell ZENworks Configuration Management=11.2

Novell ZENworks Configuration Management=11.2.1

Novell ZENworks Configuration Management=11.2.2

Novell ZENworks Configuration Management=11.2.3

Event History

Jun 17, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1095?

CVE-2013-1095 has a medium severity level, indicating potential risk but not critical.

How do I fix CVE-2013-1095?

To fix CVE-2013-1095, you should upgrade to Novell ZENworks Configuration Management version 11.2.3a Monthly Update 1 or later.

What products are vulnerable to CVE-2013-1095?

CVE-2013-1095 affects Novell ZENworks Configuration Management versions 11.2, 11.2.1, 11.2.2, and 11.2.3.

What type of vulnerability is CVE-2013-1095?

CVE-2013-1095 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.

When was CVE-2013-1095 disclosed?

CVE-2013-1095 was disclosed in 2013, highlighting security concerns in the Novell ZENworks Configuration Management software.