[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flxIggB_BzdxPNG5YWdmtmBbXPbnC9FTaHSmOUZGcvWs":3,"g5a-family:novell\u002Fopen_enterprise_server":145,"g5a-ex:novell\u002Fopen_enterprise_server@*":150},{"success":4,"data":5},true,{"product":6,"versions":42,"topVulnerabilitiesByEpss":54,"kevVulnerabilities":115,"seoMetadata":123,"meta":142},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":41},"novell","open_enterprise_server",11,22,2,"2019-12-30",[14,19,22,24,26,29,31,33,35,37,39],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1",1,0,false,{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},"11.0",9,{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},"1.x",{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},"2",{"version":27,"cve_count":28,"kev_count":11,"has_kev":4},"2.0",3,{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},"2.0.1",{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},"2015",{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},"2.0.2",{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},"2.0.3",{"version":38,"cve_count":28,"kev_count":17,"has_kev":18},"9",{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},"9.0","Open Enterprise Server by Novell is a technology product with 11 tracked versions and 22 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[43,44,45,46,47,48,49,50,51,52,53],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},{"version":27,"cve_count":28,"kev_count":11,"has_kev":4},{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},{"version":38,"cve_count":28,"kev_count":17,"has_kev":18},{"version":40,"cve_count":17,"kev_count":17,"has_kev":18},[55,63,68,75,82,88,95,101,106,111],{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":4,"epssScore":62},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":4,"epssScore":67},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":73,"severity":61,"isKev":18,"epssScore":74},"CVE-2006-0736","Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers to execute arbitrary code via unspecified vectors.","2006-02-27",10,"v2",0.07053,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":73,"severity":80,"isKev":18,"epssScore":81},"CVE-2005-3655","Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.","2005-12-31",7.5,"High",0.05715,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":73,"severity":61,"isKev":18,"epssScore":87},"CVE-2008-5021","nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.","2008-11-13",9.3,0.03633,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":73,"severity":93,"isKev":18,"epssScore":94},"CVE-2006-0998","The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.","2006-03-23",5,"Medium",0.03204,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":79,"cvssVersion":99,"severity":80,"isKev":18,"epssScore":100},"CVE-2017-5182","Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows complete directory traversal and total information disclosure. This vulnerability is present on all versions of OES for linux, it applies to OES2015 SP1 before Maintenance Update 11080, OES2015 before Maintenance Update 11079, OES11 SP3 before Maintenance Update 11078, OES11 SP2 before Maintenance Update 11077).","2017-01-23","v3.0",0.03147,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":79,"cvssVersion":73,"severity":80,"isKev":18,"epssScore":105},"CVE-2011-4194","Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 (OES2) through SP3 on Linux allows remote attackers to execute arbitrary code via a crafted attributes-natural-language field.","2012-02-02",0.02988,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":72,"cvssVersion":73,"severity":61,"isKev":18,"epssScore":110},"CVE-2014-0598","Directory traversal vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux has unspecified impact and remote attack vectors.","2014-06-18",0.02507,{"cveId":112,"description":113,"publishedDate":91,"cvssScore":92,"cvssVersion":73,"severity":93,"isKev":18,"epssScore":114},"CVE-2006-0999","The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session.",0.02269,[116,121],{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"severity":61,"isKev":4,"epssScore":62,"cisaVulnName":117,"cisaDateAdded":118,"cisaShortDescription":119,"cisaRequiredAction":120},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":64,"description":65,"publishedDate":66,"cvssScore":59,"severity":61,"isKev":4,"epssScore":67,"cisaVulnName":117,"cisaDateAdded":118,"cisaShortDescription":122,"cisaRequiredAction":120},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"title":124,"metaDescription":125,"keywords":126,"structuredData":127},"Open Enterprise Server by Novell - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Open Enterprise Server by Novell covering 11 versions with 22 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Open Enterprise Server vulnerabilities, Open Enterprise Server security, Open Enterprise Server CVE, Novell Open Enterprise Server, Open Enterprise Server threat intelligence, Novell security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Open Enterprise Server KEV, Open Enterprise Server exploited vulnerabilities",{"@context":128,"@type":129,"name":130,"description":125,"url":131,"manufacturer":132,"applicationCategory":136,"softwareVersion":137,"mainEntity":138},"https:\u002F\u002Fschema.org","SoftwareApplication","Open Enterprise Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnovell\u002Fopen_enterprise_server",{"@type":133,"name":134,"url":135},"Organization","Novell","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnovell","Security Software","11 versions tracked",{"@type":139,"name":140,"description":141,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Open Enterprise Server Security Vulnerabilities","Security vulnerabilities affecting Open Enterprise Server by Novell",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":143,"apiVersion":144},"2026-10-18T18:51:49.390Z","3.0",[146,148],{"product":147,"cves":16},"open_enterprise_server_11",{"product":149,"cves":16},"open_enterprise_server_2015",{"rows":151,"total":11,"capped":18,"failed":17},[152,158],{"cveId":56,"name":117,"severity":61,"cvss":59,"added":118,"epss":62,"published":153,"ranges":154,"checked":4,"hits":157,"covers":18},"2014-09-24T18:48:04.477",[155,156],"2.0-sp3","11.0-sp2",[],{"cveId":64,"name":117,"severity":61,"cvss":59,"added":118,"epss":67,"published":159,"ranges":160,"checked":4,"hits":161,"covers":18},"2014-09-25T01:55:04.367",[155,156],[]]