Critical (9.8) in novell zenworks configuration management. EPSS 7.1% chance of exploitation in the next 30 days.
SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Severity
CVSS 3.0
9.8 critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
7.1% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)