Novell Teaming vulnerabilities

2 CVEs affecting Novell Teaming, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1294, published 2009-04-16.

More from Novell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-1294, published 2009-04-16. Medium severity, CVSS 4.3. EPSS: 4.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0 through SP3 (1.0.3) allow remote attackers to inject arbitrary web script or…
• CVE-2009-1293, published 2009-04-16. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on whether the username is valid or invalid, which makes it easier…