CVE-2010-4229: Novell Zenworks Configuration Management

High severity, CVSS 10.0. EPSS: 25.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.

Affected products

• Novell Zenworks Configuration Management: version 10.3 only; version 10.3.1 only; version 11 only

Published 2011-04-18. Last modified 2026-06-16.