CVE-2015-0785: Novell Zenworks Configuration Management

High severity, CVSS 7.5. EPSS: 6.5% chance of exploitation in the next 30 days.

com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.

Affected products

• Novell Zenworks Configuration Management: affected versions not specified

Published 2017-08-09. Last modified 2026-06-17.