Novell Netware vulnerabilities, page 4
64 vulnerabilities
Known vulnerabilities in Novell Netware, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2006-0998novellnetware
EPSS score3.20%
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.CVE-2006-0997novellnetwareEPSS score1.62%
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.CVE-2006-0999novellnetwareEPSS score2.27%
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session.CVE-2006-6675novellapache_http_server+1EPSS score1.98%
Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app.