Lucene search
IBM80707DEDE830EEBA2718A20B010C8A34D8C482E8A92EF2AF8B3EAF1C337706A5HistoryJun 15, 2018 - 7:03 a.m.
Security Bulletin: Multiple vulnerabilities in IBM HTTP Server shipped with WebSphere Application Server affect IBM Business Process Manager and WebSphere Lombardi Edition
2018-06-1507:03:41
www.ibm.com
5
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
Summary
WebSphere Application Server is shipped as a component of IBM Business Process Manager and WebSphere Lombardi Edition. Information about security vulnerabilities affecting IBM HTTP Server shipped with WebSphere Application Server have been published in security bulletins.
Vulnerability Details
Please consult the security bulletins
- Security Bulletin: HTTP Request smuggling vulnerability may affect IBM HTTP Server (CVE-2015-3183)
- Security Bulletin: Denial of service may affect IBM HTTP Server (CVE-2015-1283)
for vulnerability details and information about fixes.
Affected Products and Versions
-
- IBM Business Process Manager V7.5.x through V8.5.6.0
- WebSphere Lombardi Edition V7.2.0.x
For_ earlier unsupported versions of the products, IBM recommends upgrading to a fixed, supported version of the product._
Workarounds and Mitigations
None
Related
ibm
ibm
Security Bulletin: Two security vulnerabilities have been identified in IBM HTTP Server shipped with IBM eDiscovery Manager (CVE-2015-1283, CVE-2015-3183)
2018-06-17 12:12:18
osv
osv
expat - security update
2015-07-26 00:00:00
expat - security update
2016-05-18 00:00:00
apache2 - security update
2015-07-28 00:00:00
nessus
nessus
Scientific Linux Security Update : httpd on SL6.x i386/x86_64 (20150824)
2015-08-25 00:00:00
FreeBSD : apache22 -- chunk header parsing defect (29083f8e-2ca8-11e5-86ff-14dae9d210b8)
2015-07-20 00:00:00
Juniper JSA10904
2019-05-29 00:00:00
debiancve
debiancve
veracode
veracode
HTTP Request Smuggling
2019-01-15 09:07:33
Denial Of Service (DoS)
2017-02-01 05:26:42
Denial Of Service (DoS)
2017-03-27 05:30:04
oraclelinux
oraclelinux
httpd security update
2015-08-24 00:00:00
httpd security update
2015-08-24 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2015-1668)
2015-10-06 00:00:00
Mageia: Security Advisory (MGASA-2015-0285)
2015-10-15 00:00:00
Debian Security Advisory DSA 3318-1 (expat - security update)
2015-07-26 00:00:00
centos
centos
httpd, mod_ssl security update
2015-08-24 18:23:20
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2015-08-25 16:08:42
freebsd
freebsd
apache22 -- chunk header parsing defect
2015-06-24 00:00:00
FreeBSD -- Multiple integer overflows in expat (libbsdxml) XML parser
2015-08-18 00:00:00
expat2 -- denial of service
2016-06-09 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3318-1] expat security update
2015-08-03 00:00:00
expat library integer overflow
2015-08-03 00:00:00
Apache security vulnerabilities
2015-07-20 00:00:00
mageia
mageia
Updated expat package fixes security vulnerability
2015-07-27 20:18:02
Updated apache package fixes security vulnerabilities
2015-07-27 12:53:07
prion
prion
Design/Logic Flaw
2015-07-20 23:59:00
Buffer overflow
2015-05-14 10:59:00
Integer overflow
2015-07-23 00:59:00
redhat
redhat
(RHSA-2015:1668) Moderate: httpd security update
2015-08-24 00:00:00
(RHSA-2015:1667) Moderate: httpd security update
2015-08-24 00:00:00
(RHSA-2016:0061) Moderate: httpd and httpd22 security update
2016-01-21 15:44:55
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:20.expat
2015-08-18 00:00:00
ubuntu
ubuntu
Expat vulnerability
2015-08-31 00:00:00
VNC4 vulnerabilities
2021-03-15 00:00:00
Apache HTTP Server vulnerabilities
2015-07-27 00:00:00
debian
debian
[SECURITY] [DSA 3318-1] expat security update
2015-07-26 17:54:13
[SECURITY] [DLA 284-1] apache2 security update
2015-07-28 21:31:48
[SECURITY] [DSA 3325-2] apache2 regression update
2015-08-18 11:39:08
amazon
amazon
Medium: httpd
2015-08-17 12:23:00
Medium: expat
2020-05-11 20:41:00
httpd
httpd
cve
cve
f5
f5
SOL17251 - Apache vulnerability CVE-2015-3183
2015-09-09 00:00:00
K17251 : Apache vulnerability CVE-2015-3183
2015-09-10 00:00:00
K50459349 : Expat XML library vulnerability CVE-2015-2716
2017-02-10 00:00:00
ubuntucve
ubuntucve
suse
suse
Security update for expat (important)
2016-06-08 12:07:50
Security update for expat (important)
2016-06-07 13:08:02
Security update for expat (important)
2016-05-30 14:09:21
archlinux
archlinux
expat: arbitrary code execution
2016-05-18 00:00:00
expat: arbitrary code execution
2016-03-24 00:00:00
lib32-expat: arbitrary code execution
2016-05-18 00:00:00
alpinelinux
alpinelinux
CVE-2016-4472
2016-06-30 17:59:00
redhatcve
redhatcve
CVE-2016-4472
2016-06-09 09:48:44
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related for 80707DEDE830EEBA2718A20B010C8A34D8C482E8A92EF2AF8B3EAF1C337706A5