The remote host has a version of Novell ZENworks Configuration Management installed prior to 11.2.3a Monthly Update 1.  It is, therefore, affected by the following vulnerabilities:

  - An open redirect vulnerability exists on the ZENworks     Control Center login page due to improper validation of     the 'fwdToURL' parameter. (CVE-2013-1093)

  - The ZENworks Control Center Login.jsp script is affected     by a cross-site scripting vulnerability that exists due     to improper validation on the 'language' parameter.
    (CVE-2013-1094)

  - A cross-site scripting vulnerability exists due to     improper validation of input when handling 'onError'     events. (CVE-2013-1095)

  - A cross-site scripting vulnerability exists due to     improper validation of input when handling frame tag     'onload' events. (CVE-2013-1097)

The remote host has a version of Novell ZENworks Configuration Management installed prior to 11.2.3a Monthly Update 1. It is, therefore, affected by the following vulnerabilities:

  - An open redirect vulnerability exists on the ZENworks Control Center login page due to improper validation of the 'fwdToURL' parameter. (CVE-2013-1093)

  - ZENworks Control Center Login.jsp スクリプトが、「language」パラメーターの検証が不適切なため存在するクロスサイトスクリプティングの脆弱性の影響を受けます。
    (CVE-2013-1094)

  - A cross-site scripting vulnerability exists due to improper validation of input when handling 'onError' events. (CVE-2013-1095)

  - A cross-site scripting vulnerability exists due to improper validation of input when handling frame tag 'onload' events. (CVE-2013-1097)

远程主机安装了低于 11.2.3a Monthly Update 1 的 Novell ZENworks Configuration Management 版本。因此，它受到以下漏洞的影响：

- ZENworks Control Center 登录页面上存在一个开放重定向漏洞，原因是未正确验证“fwdToURL”参数。(CVE-2013-1093)

- ZENworks Control Center Login.jsp 脚本受到因未正确验证“language”参数而存在的一个跨站脚本漏洞的影响。
 (CVE-2013-1094)

- 存在一个跨站脚本漏洞，原因是处理“onError”事件时未正确验证输入。(CVE-2013-1095)

- 存在一个跨站脚本漏洞，原因是处理 frame 标签“onload”事件时未正确验证输入。(CVE-2013-1097)

遠端主機上安裝的 Novell ZENworks Configuration Management 版本比 11.2.3a Monthly Update 1 舊。因此受到以下弱點影響：

- ZENworks Control Center 登入頁面上存在一個開放重新導向弱點，這是因為不當驗證 'fwdToURL’ 參數所導致。(CVE-2013-1093)

- ZENworks Control Center Login.jsp 指令碼受到一個跨網站指令碼弱點影響，該弱點是因為不當驗證 'language’ 參數所導致。
 (CVE-2013-1094)

- 存在一個跨網站指令碼弱點，這是因為處理 'onError' 事件時不當驗證輸入所導致。(CVE-2013-1095)

- 存在一個跨網站指令碼弱點，這是因為處理框架標籤 'onload' 事件時不當驗證輸入所導致。(CVE-2013-1097)

ID	名稱	產品	系列	已發布	已更新	嚴重性
66913	Novell ZENworks Configuration Management < 11.2.3a Monthly Update 1 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	2013/6/18	2019/11/27	medium
66913	Novell ZENworks Configuration Management < 11.2.3a Monthly Update 1 における複数の脆弱性（credentialed check）	Nessus	Windows	2013/6/18	2019/11/27	medium
66913	Novell ZENworks Configuration Management < 11.2.3a Monthly Update 1 多种漏洞（凭据检查）	Nessus	Windows	2013/6/18	2019/11/27	medium
66913	Novell ZENworks Configuration Management < 11.2.3a Monthly Update 1 多個弱點 (經認證的檢查)	Nessus	Windows	2013/6/18	2019/11/27	medium

偵測

搜尋 Plugin

medium

medium

medium

medium