Novell Zenworks Mobile Management vulnerabilities

2 CVEs affecting Novell Zenworks Mobile Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1082, published 2013-03-29.

More from Novell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-1081, published 2013-03-11. High severity, CVSS 7.5. EPSS: 68.1% chance of exploitation in the next 30 days. Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter.
• CVE-2013-1082, published 2013-03-29. High severity, CVSS 7.5. EPSS: 12.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and execute arbitrary local files via the language parameter.