CVE-2010-0784

IBM WebSphere Application Server 7.x is affected by a cross-site scripting (XSS) vulnerability in the Administrative Console prior to 7.0.0.13. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. OpenVAS entries corroborate multiple vulnerabilities fo...

CVE-2010-0783

CVE-2010-0783 is an XSS vulnerability in the Administrative Console of IBM WebSphere Application Server (WAS). The affected products are IBM WebSphere Application Server 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13. The vulnerability allows remote attackers to inject arbitrary web script or HTML v...

CVE-2010-0777

CVE-2010-0777 affects IBM WebSphere Application Server Web Container. The issue arises from improper handling of long filenames, which can cause responses to include an incorrect file and disclose sensitive information. Affected products/versions: WAS 6.0 prior to 6.0.2.43, WAS 6.1 prior to 6.1.0...

CVE-2009-3106

CVE-2009-3106 affects IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37. The Servlet Engine/Web Container fails to properly enforce security constraints on the doGet and doTrace methods, allowing remote attackers to bypass access restrictions and potentially obtain sensitive informatio...

CVE-2009-0891

CVE-2009-0891 affects IBM WebSphere Application Server’s Web Services Security (WS-Security) bindings. The vulnerability arises because the WS-Security component in WAS versions 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23), and 6.0.2 before Fix Pack 33 (6.0.2.33) does not pr...

CVE-2009-0434

PerfServlet in IBM WebSphere Application Server (WAS) PMI/Performance Tools is affected: when PMI is enabled, a local attacker can read systemout.log and ffdc files to obtain sensitive information. Affected versions include WAS 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0....

CVE-2008-4017

Technical details for CVE-2008-4017 are not provided in the connected documents. The OC4J vulnerability in Oracle Application Server 10.1.2.3 is described as unspecified; monitor for updates from Oracle/NVD and other security advisories.

CVE-2008-5413

CVE-2008-5413 affects IBM WebSphere Application Server (WAS): PerfServlet in the PMI/Performance Tools component allows a local attacker to read sensitive information from logs (systemout.log) and ffdc files. Affected line in the public description specifies WAS 7 before 7.0.0.1 (and related note...

CVE-2008-4679

CVE-2008-4679 affects IBM WebSphere Application Server: Web Services Security in WAS 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19. When Certificate Store Collections uses CRLs, the code path does not call setRevocationEnabled on PKIXBuilderParameters, preventing revocation checks for X.509 certi...

CVE-2008-2221

Unspecified vulnerability in the Java plugin in IBM WebSphere Application Server 5.0.2 allows untrusted applets to gain privileges via unknown attack vectors...

CVE-2008-2221

Technical details about CVE-2008-2221 are not publicly available in the provided documents; no product/version specifics or exploit information are present. Monitor for updates.

CVE-2008-1040

The CVE-2008-1040 issue affects Fujitsu Interstage products: Interstage Application Server (versions 8.0.0–8.0.3 and 9.0.0), Interstage Studio (8.0.1 and 9.0.0), and Interstage Apworks 8.0.0. It is a buffer overflow in the Single Sign-On function caused by improper URI handling, which enables a r...

CVE-2007-5526

Technical details about CVE-2007-5526 are not publicly provided in the supplied documents; no affected product/version or impact specifics are stated. Monitor for updates.

CVE-2007-3553

CVE-2007-3553 is an XSS in Oracle Application Server 11i's Rapid Install Web Server. The vulnerability allows remote attackers to inject arbitrary script/HTML via a URL to the Secondary Login Page (demonstrated with pls/ and pls/MSBEP004/). Connected Nessus content explicitly references this CVE ...

CVE-2007-3264

CVE-2007-3264 affects the PD tools component of IBM WebSphere Application Server (WAS) up to version 6.1.0.7 and earlier. The vulnerability is unspecified with unknown impact and attack vectors, per the NVD entry. The CVSS metrics indicate a high severity (base score 10.0) with a network attack v...

CVE-2006-7198

IBM WebSphere Application Server (WAS) versions affected: WAS before 5.1.1.14 and WAS for z/OS 601 before 6.0.2.13, tied to CVE-2006-7198. The connected documents describe an unspecified vulnerability with unknown impact and attack vectors, associated with a "Potential security exposure" PK26123....

CVE-2007-1608

CRLF injection vulnerability in IBM WebSphere Application Server WAS before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header...

CVE-2006-6853

Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002...

CVE-2006-6853

Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002...

Solaris 9 (sparc) : 119166-43

Sun Java System App Server Enterprise Ed 8.1 2005Q1, Solaris Patch. Date this patch was last updated by Sun : Oct/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...