10014 matches found
CVE-2006-2435
Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to "Inserting certain script tags in urls that may allow unintended execution of scripts."...
Design/Logic Flaw
Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and remote attack vectors related to "HTTP request handlers"...
Code injection
WebSphere Application Server 5.0.2 or any earlier cumulative fix stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges...
CVE-2006-2432
IBM WebSphere Application Server 5.0.2 or any earlier cumulative fix and 5.1.1 or any earlier cumulative fix allows EJB access on Solaris systems via a crafted LTPA token...
CVE-2006-2433
Technical details for CVE-2006-2433 are not publicly available in the provided documents; no affected product, vulnerable component, impact, or remediation is specified here. Monitor for updates.
CVE-2006-2436
WebSphere Application Server 5.0.2 (or earlier cumulative fixes) stores admin and LDAP passwords in plaintext in FFDC logs following failed logins, enabling privilege escalation if logs are accessed. The underlying cause is plaintext credential logging in FFDC. Affected component: WebSphere Appli...
CVE-2006-2432
CVE-2006-2432 affects IBM WebSphere Application Server 5.0.2 (and earlier cumulative fixes) and 5.1.1 (and earlier cumulative fixes); on Solaris, a crafted LTPA token enables EJB access. The NVD entry assigns a CVSSv2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, and...
CVE-2006-2430
CVE-2006-2430 affects IBM WebSphere Application Server: versions 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7. The vulnerability arises because user credentials are recorded in plaintext in addNode.log, which can allow attackers to gain privileges. Supported connected documents c...
CVE-2006-2435
Technical details for CVE-2006-2435 are not publicly disclosed in the provided documents; the records only reiterate an unspecified vulnerability in IBM WebSphere Server with potential script-injection in URLs. Monitor for updates in connected sources.
CVE-2006-2429
Technical details are not publicly available in the provided connected documents; the CVE entry content remains the same as the initial description. Monitor for updates.
CVE-2006-2433
Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and attack vectors related to the "administrative console"...
CVE-2006-2436
WebSphere Application Server 5.0.2 or any earlier cumulative fix stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges...
CVE-2006-2429
Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and remote attack vectors related to "HTTP request handlers"...
CVE-2006-2435
Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to "Inserting certain script tags in urls that may allow unintended execution of scripts."...
CVE-2006-2431
Summary: The CVE-2006-2431 issue is a cross-site scripting (XSS) vulnerability in the IBM WebSphere Application Server SOAP connector error page. Affected versions: WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7. Component and cause: The vulnerabili...
vulnerability details
Release Date: 03/01/2006 Affected Applications: SAP WebAS Kernel up to version 7.00 Affected Platforms: Platform-Independant Local / Remote: Remote Severity: Medium to High Author: A. Grossmann arnold.grossmann at gmail.com Vendor Status: Confirmed Product Overview cited from SAP :...
SAP Web Application Server crossite scripting
Crossite scripting with error messages...
Macromedia ColdFusion MX application server crossite scripting
Crossite scripting with error pages...
Moderate: Red Hat Security Advisory: struts security update for Red Hat Application Server
An updated Struts package that fixes several security issues is now available for Red Hat Application Server. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Struts is a framework for building web applications with Java. A validation bug was...