CVE-2009-0891

CVE-2009-0891 affects IBM WebSphere Application Server’s Web Services Security (WS-Security) bindings. The vulnerability arises because the WS-Security component in WAS versions 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23), and 6.0.2 before Fix Pack 33 (6.0.2.33) does not pr...

CVE-2009-0434

PerfServlet in IBM WebSphere Application Server (WAS) PMI/Performance Tools is affected: when PMI is enabled, a local attacker can read systemout.log and ffdc files to obtain sensitive information. Affected versions include WAS 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0....

CVE-2008-4017

Technical details for CVE-2008-4017 are not provided in the connected documents. The OC4J vulnerability in Oracle Application Server 10.1.2.3 is described as unspecified; monitor for updates from Oracle/NVD and other security advisories.

CVE-2008-5413

CVE-2008-5413 affects IBM WebSphere Application Server (WAS): PerfServlet in the PMI/Performance Tools component allows a local attacker to read sensitive information from logs (systemout.log) and ffdc files. Affected line in the public description specifies WAS 7 before 7.0.0.1 (and related note...

CVE-2008-4679

CVE-2008-4679 affects IBM WebSphere Application Server: Web Services Security in WAS 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19. When Certificate Store Collections uses CRLs, the code path does not call setRevocationEnabled on PKIXBuilderParameters, preventing revocation checks for X.509 certi...

CVE-2008-2221

Technical details about CVE-2008-2221 are not publicly available in the provided documents; no product/version specifics or exploit information are present. Monitor for updates.

CVE-2008-2221

Unspecified vulnerability in the Java plugin in IBM WebSphere Application Server 5.0.2 allows untrusted applets to gain privileges via unknown attack vectors...

CVE-2008-1040

The CVE-2008-1040 issue affects Fujitsu Interstage products: Interstage Application Server (versions 8.0.0–8.0.3 and 9.0.0), Interstage Studio (8.0.1 and 9.0.0), and Interstage Apworks 8.0.0. It is a buffer overflow in the Single Sign-On function caused by improper URI handling, which enables a r...

CVE-2007-5526

Technical details about CVE-2007-5526 are not publicly provided in the supplied documents; no affected product/version or impact specifics are stated. Monitor for updates.

CVE-2007-3553

CVE-2007-3553 is an XSS in Oracle Application Server 11i's Rapid Install Web Server. The vulnerability allows remote attackers to inject arbitrary script/HTML via a URL to the Secondary Login Page (demonstrated with pls/ and pls/MSBEP004/). Connected Nessus content explicitly references this CVE ...

CVE-2007-3264

CVE-2007-3264 affects the PD tools component of IBM WebSphere Application Server (WAS) up to version 6.1.0.7 and earlier. The vulnerability is unspecified with unknown impact and attack vectors, per the NVD entry. The CVSS metrics indicate a high severity (base score 10.0) with a network attack v...

CVE-2006-7198

IBM WebSphere Application Server (WAS) versions affected: WAS before 5.1.1.14 and WAS for z/OS 601 before 6.0.2.13, tied to CVE-2006-7198. The connected documents describe an unspecified vulnerability with unknown impact and attack vectors, associated with a "Potential security exposure" PK26123....

CVE-2007-1608

CRLF injection vulnerability in IBM WebSphere Application Server WAS before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header...

CVE-2006-6853

Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002...

CVE-2006-6853

Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002...

Solaris 8 (sparc) : 119166-43

Sun Java System App Server Enterprise Ed 8.1 2005Q1, Solaris Patch. Date this patch was last updated by Sun : Oct/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 119167-43 (deprecated)

Sun Java System App Server Enterprise Ed 8.1 2005Q1, x86 Patch32. Date this patch was last updated by Sun : Oct/18/11 This plugin has been deprecated and either replaced with individual 119167 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 9 (x86) : 119167-43

Sun Java System App Server Enterprise Ed 8.1 2005Q1, x86 Patch32. Date this patch was last updated by Sun : Oct/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 119166-43

Sun Java System App Server Enterprise Ed 8.1 2005Q1, Solaris Patch. Date this patch was last updated by Sun : Oct/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

CVE-2006-5324

The CVE-2006-5324 affects IBM WebSphere Application Server’s Web Services Notification (WSN) component prior to version 6.1.0.2. The vulnerability allows an unauthenticated attacker to obtain unspecified access without providing a username and password (PK28374). The issue is network-accessible w...