Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Novell Subscribe
Filtered by product Zenworks Endpoint Security Management
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-5665 1 Novell 1 Zenworks Endpoint Security Management 2011-03-07 7.2 HIGH N/A
STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management (ESM) 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by creating a cmd.exe binary in the diagnostic report directory.