CVE-2015-0782

9.8CRITICAL

Key Information

Vendor: Novell
Status: Zenworks Configuration Management
Vendor: CVE Published:; 9 August 2017

Summary

SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Aug 9, 2017
Vulnerability Reserved.
Jan 7, 2015

Collectors

NVD DatabaseMitre Database