NetSight
IP …
medium4.3

CVE-2013-1095

Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allow…

Impact

Cross-site scripting (XSS) vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management (ZCM) 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onError event.

Affected products

VendorProductAffected versions
NovellZenworks Configuration Management
Versions 11.2, 11.2.1, 11.2.2, 11.2.3

Weakness classification

CWE-79

References