CVE Catalog
CVE-2015-0780
CriticalSummary
SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access to the database, potentially leading to data disclosure or modification.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.