Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and execute arbitrary local files via the language parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
PHP
Path Traversal
Zenworks Mobile Management
NVD
CVSS 2.0
7.5
EPSS
4.8%
IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the service path, which. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.
Information Disclosure
IBM
Security Appscan
Rational Policy Tester
NVD
CVSS 2.0
7.2
EPSS
0.1%