Novell Vibe Onprem vulnerabilities

2 CVEs affecting Novell Vibe Onprem, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0464, published 2011-03-09.

More from Novell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-0464, published 2011-03-09. High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days. Unspecified vulnerability in Novell Vibe OnPrem 3.0 before Hot Patch 1 allows remote attackers to execute arbitrary code via unknown vectors.
• CVE-2010-4322, published 2011-01-07. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in gwtTeaming.rpc in Novell Vibe OnPrem 3 BETA allows remote authenticated users to inject arbitrary web script or HTML via the Micro Blog (aka What Are You…