Novell

Service Desk

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2016-1596

  • EPSS 0.25%
  • Published 22.04.2016 10:59:03
  • Last modified 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a certain (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4...

6.5

CVE-2016-1595

  • EPSS 3.53%
  • Published 22.04.2016 10:59:02
  • Last modified 12.04.2025 10:46:40

LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language (HQL) injection attacks and obtain sensitive information via the entit...

6.5

CVE-2016-1594

  • EPSS 4.71%
  • Published 22.04.2016 10:59:01
  • Last modified 12.04.2025 10:46:40

Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining sensitive information via a (1) downloadLogFiles or (2) downloadFile action.

7.2

CVE-2016-1593

  • EPSS 85.11%
  • Published 22.04.2016 10:59:00
  • Last modified 12.04.2025 10:46:40

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-...