CVE-2016-3042

CVE-2016-3042 affects IBM WebSphere Application Server Liberty (OpenID Connect clients) and is a cross-site scripting vulnerability that could allow arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. IBM bulletins confirm the vulnerability ...

CVE-2016-5986

IBM WebSphere Application Server WAS 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-5986

CVE-2016-5986 is an information-disclosure vulnerability in IBM WebSphere Application Server (WAS) and WAS Liberty. Exploitation arises from improper handling of responses under certain conditions, enabling remote attackers to obtain server identification information and other sensitive data. IBM...

RHEL 7 : org.ovirt.engine-root (RHSA-2016:1967)

An update for org.ovirt.engine-root is now available for RHEV Engine version 4.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: org.ovirt.engine-root security, bug fix, and enhancement update

An update for org.ovirt.engine-root is now available for RHEV Engine version 4.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2016-3040

IBM WebSphere Application Server WAS Liberty, as used in IBM Security Privileged Identity Manager ISPIM Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Code injection

IBM WebSphere Application Server WAS Liberty, as used in IBM Security Privileged Identity Manager ISPIM Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2016-3040

CVE-2016-3040 is an Open Redirect vulnerability in IBM WebSphere Application Server Liberty. IBM bulletins show it can enable phishing by redirecting users to arbitrary sites and note it affects WAS Liberty in various IBM products (e.g., Spectrum Control/Tivoli Storage Productivity Center, Messag...

RHEL 6 : Virtualization Manager (RHSA-2016:1929)

An update for org.ovirt.engine-root is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: Red Hat Virtualization Manager (RHV) bug fix 3.6.9

An update for org.ovirt.engine-root is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2016-08095)

IBM WebSphere Application Server is an application server product developed and distributed by IBM in the United States, which is a platform for Java EE and Web services applications. A security vulnerability exists in IBM WebSphere Application Server. A remote attacker can exploit the...

IBM WebSphere Application Server Liberty Profile Cross-Site Scripting Vulnerability

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform.Liberty Profile is a WAS dynamic server Liberty Profile is a...

[SECURITY] Fedora 25 Update: trytond-account-invoice-4.0.2-1.fc25

account-invoice module for Tryton application server...

[SECURITY] Fedora 25 Update: trytond-account-4.0.3-1.fc25

account module for Tryton application server...

[SECURITY] Fedora 25 Update: trytond-party-4.0.2-1.fc25

party module for Tryton application server...

[SECURITY] Fedora 25 Update: trytond-google-maps-4.0.2-1.fc25

google-maps module for Tryton application server...

[SECURITY] Fedora 25 Update: trytond-account-product-4.0.2-1.fc25

account-product module for Tryton application server...

[SECURITY] Fedora 25 Update: trytond-purchase-4.0.3-1.fc25

purchase module for Tryton application server...

eap: HTTP header injection / response splitting

It was reported that EAP 7 Application Server/Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.2

Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.0.2, fix several bugs, and add various enhancements are now available from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...