Novell Vulnerabilità

Sequenza temporale

Genere

Prodotto

Novell NetWare78
Novell GroupWise75
Novell eDirectory51
Novell ZENworks Configuration Management30
Novell openSUSE27

Contromisure

Official Fix374
Temporary Fix0
Workaround15
Unavailable4
Not Defined159

Sfruttabilità

High54
Functional1
Proof-of-Concept192
Unproven16
Not Defined289

Accesso al vettore

Not Defined0
Physical0
Local78
Adjacent6
Network468

Autenticazione

Not Defined0
High1
Low68
None483

Interazione dell'utente

Not Defined0
Required67
None485

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤431
≤556
≤6152
≤745
≤8114
≤925
≤10129

CVSSv3 Temp

≤10
≤20
≤31
≤444
≤586
≤6135
≤791
≤854
≤956
≤1085

VulDB

≤10
≤20
≤30
≤431
≤561
≤6150
≤740
≤8122
≤919
≤10129

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤78
≤810
≤93
≤107

CNA

≤10
≤20
≤30
≤40
≤51
≤62
≤71
≤80
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k0
<2k1
<5k9
<10k148
<25k223
<50k168
<100k1
≥100k2

Exploiter aujourd'hui

<1k491
<2k8
<5k21
<10k26
<25k6
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (91): Access Manager (8), Access Manager iManager (1), AppArmor (1), BorderManager (13), Client (19), Client Firewall (1), Client Login Extension (cle) (1), Cloud Manager (1), Data Synchronizer (7), Emframe (1), File Reporter (7), Filr (6), Forum (1), GroupWise (75), GroupWise Client (4), GroupWise Messenger (3), GroupWise WebAccess (1), Groupwise (5), Groupwise Webaccess (1), Identity Manager (14), Identity Manager Roles Based Provisioning Module (2), Identity Manager User Application (2), Internet Messaging System (1), Iprint Open Enterprise Server (1), Iprint Open Enterprise Server 2 (1), Kanaka (1), Linux (3), Linux Desktop (2), Messenger (1), Mini FTP Server (2), Modular_authentication_service (1), Mono (1), Moonlight (5), NetIQ (5), NetIQ Sentinel Agent Manager (1), NetMail (16), NetWare (78), NetWare Client (3), NetWare Enterprise (6), Netidentity Client1.2.3 (1), Netmail (1), Netware (5), Netware Management Portal (1), Novell Client (1), Nsure Audit (1), Open Enterprise Server (12), OpenSUSE (1), OpenSUSE SWAMP (1), Remote Manager (1), SUSE Cloud (1), SUSE Lifecycle Management Server (4), SUSE Linux Enterprise for SAP Applications (1), SUSE Manager (1), SecureLogin (2), Sentinel Log Manager (2), Suse Linux Enterprise Server (3), Teaming (2), UnixWare (1), User Application (1), Vibe OnPrem (2), Web Search (1), Web Server (2), XTier framework (1), ZENworks (5), ZENworks Asset Management (3), ZENworks Configuration Management (30), ZENworks Configuration Manager (1), ZENworks Control Center (1), ZENworks Desktop Management (2), ZENworks Handheld Management (3), ZENworks Mobile Management (2), ZENworks Patch Management Update Agent (1), ZENworks for Desktops (1), Zenworks Desktops (1), Zenworks Handheld Management (1), Zenworks Patch Management Server (2), Zenworks_endpoint_security_management (1), eDirectory (51), eDitrectory (1), eMFrame (1), exteNd Director (1), iChain (12), iManager (14), iPrint (27), iPrint Client (7), libzypp (1), linux desktop (1), openSUSE (27), openSUSE Build Service (2), openSUSE Factory (1), zenworks for desktops (1)

Link to Vendor Website: https://www.novell.com/

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
02/05/20195.75.7Novell Open Enterprise Server Netstorage DOM-Based cross site scriptingSconosciutoNot DefinedUnavailable0.001150.04CVE-2019-3490
21/11/20188.58.2Novell NetWare NFS Portmapper Daemon buffer overflowOperating SystemNot DefinedOfficial Fix0.030310.02CVE-2009-5153
02/03/20186.36.2Novell eDitrectory Remote Code ExecutionSconosciutoNot DefinedOfficial Fix0.001810.00CVE-2017-9277
02/03/20185.35.2Novell Access Manager iManager Reflected cross site scriptingAccess Management SoftwareNot DefinedOfficial Fix0.000790.00CVE-2017-9276
02/03/20187.17.0Novell eDirectory LDAP Interface crittografia deboleDirectory Service SoftwareNot DefinedOfficial Fix0.002270.03CVE-2017-9267
02/03/20186.36.2Novell Access Manager Admin Console/IDP Server RedirectAccess Management SoftwareNot DefinedOfficial Fix0.001250.00CVE-2017-14802
09/08/20178.58.5Novell ZENworks Configuration Management Preboot Policy Service buffer overflowPolicy Management SoftwareNot DefinedNot Defined0.782340.00CVE-2015-0786
09/08/20176.46.4Novell ZENworks Configuration Management Folder rivelazione di un 'informazionePolicy Management SoftwareNot DefinedNot Defined0.336770.00CVE-2015-0785
09/08/20176.46.4Novell ZENworks Configuration Management Rtrlet.class ShowLogins rivelazione di un 'informazionePolicy Management SoftwareNot DefinedNot Defined0.694830.00CVE-2015-0784
09/08/20175.45.4Novell ZENworks Configuration Management FileViewer File rivelazione di un 'informazionePolicy Management SoftwareNot DefinedNot Defined0.235660.02CVE-2015-0783
09/08/20178.58.5Novell ZENworks Configuration Management ScheduleQuery sql injectionPolicy Management SoftwareNot DefinedNot Defined0.045780.00CVE-2015-0782
09/08/20178.58.5Novell ZENworks Configuration Management doPost directory traversalPolicy Management SoftwareNot DefinedNot Defined0.125660.00CVE-2015-0781
09/08/20178.58.5Novell ZENworks Configuration Management GetReRequestData sql injectionPolicy Management SoftwareNot DefinedNot Defined0.219790.00CVE-2015-0780
03/05/20178.58.2Novell iManager Upload escalazione di privilegiSconosciutoNot DefinedOfficial Fix0.004280.01CVE-2017-7432
03/05/20176.56.2Novell iManager Object Manager Persistent cross site request forgerySconosciutoNot DefinedOfficial Fix0.001800.01CVE-2017-7431
03/05/20175.24.9Novell iManager Framework Persistent cross site scriptingSconosciutoNot DefinedOfficial Fix0.003270.00CVE-2017-7430
27/04/20177.47.1Novell iManager Communication Certificate MD5 crittografia deboleSconosciutoNot DefinedOfficial Fix0.008410.01CVE-2017-5186
23/03/20175.25.2Novell GroupWise Document Viewer Agent Reflected cross site scriptingGroupware SoftwareNot DefinedNot Defined0.001090.03CVE-2016-9169
23/03/20176.96.6Novell eDirectory NDSD escalazione di privilegiDirectory Service SoftwareNot DefinedOfficial Fix0.001700.00CVE-2016-9168
23/03/20177.47.1Novell eDirectory NDSD escalazione di privilegiDirectory Service SoftwareNot DefinedOfficial Fix0.001190.00CVE-2016-9167
23/03/20177.47.1Novell eDirectory NDSD escalazione di privilegiDirectory Service SoftwareNot DefinedOfficial Fix0.004730.00CVE-2016-5747
11/03/20177.57.2Novell iPrint Client ActiveX Plugin buffer overflowPrinting SoftwareNot DefinedOfficial Fix0.031680.02CVE-2010-4314
15/11/20169.18.7Novell Open Enterprise Server File escalazione di privilegiSconosciutoNot DefinedOfficial Fix0.006370.00CVE-2016-5763
01/08/20167.87.0Novell Filr vainit.sh escalazione di privilegiSconosciutoProof-of-ConceptOfficial Fix0.000500.00CVE-2016-1611
01/08/20167.56.7Novell Filr email-template Feature directory traversalSconosciutoProof-of-ConceptOfficial Fix0.012260.02CVE-2016-1610

527 non vengono visualizzate più voci

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!