CVE-2015-0780: SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks...

Security readout for executives and security teams

This is a remote SQL injection issue in Novell ZENworks Configuration Management. A remote attacker could cause database commands to run through a server-side method. The source bundle does not provide affected versions, scoring, or fix details, so urgency depends on whether ZCM is deployed and vendor guidance confirms exposure. Organizations with Novell ZENworks Configuration Management exposed to untrusted networks may be exposed. The bundle does not identify specific affected versions, configurations, or reachable endpoints. Prioritize assessment if ZCM is deployed, especially on internet-reachable or partner-reachable networks. Business risk could be significant because SQL injection may affect managed endpoint data and backend database integrity, but source evidence is incomplete. Mitigation focus: Check Novell support guidance for affected ZCM versions and fixed releases.; Patch or upgrade ZCM according to vendor guidance if exposure is confirmed.; Restrict ZCM administrative and service interfaces from untrusted networks..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.