WebSphere Application Server File Disclosure

The vulnerability of WebSphere Application Server’s application servers exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files using a specially crafted URL...

WebSphere Application Server Code Execution

The vulnerability of WebSphere Application Server application servers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted sequence of instructions sent to the management port...

WebSphere Application Server Data Compromise

The IBM WebSphere Application Server program contains a vulnerability in its security profiles, which allows a malicious attacker to gain access to protected information by manipulating URL requests...

WebSphere Application Server Information Disclosure

The vulnerability in the IBM Global Security Kit GSKit allows malicious actors to induce a service failure by using a specially crafted handshake during the reestablishment of an SSLv2 session...

WebSphere Application Server Data Compromise

The vulnerability in Proxy and ODR servers of IBM WebSphere Application Server allows a malicious actor in the network to access confidential information. This vulnerability is related to the improper processing of requests...

WebSphere Application Server Data Compromise

Cross-site scripting XSS in the IBM WebSphere Application Server administrative console allows authorized administrators who have passed authentication to inject any web script or HTML code using a specially crafted URL address...

WebSphere Application Server Information Disclosure

The vulnerability in IBM WebSphere Application Server allows malicious actors, operating remotely, to trigger a service failure excessive resource consumption by sending a specially crafted request to the web service endpoint...

WebSphere Application Server Information Disclosure

The vulnerability in the XML4J processor of IBM WebSphere Message Broker and IBM Integration Bus allows malicious actors to trigger a service failure excessive memory consumption by using a specially crafted XML document that causes a large number of entities to be processed excessively...

IBM WebSphere Application Server CRLF Injection Vulnerability (swg21982526)

IBM WebSphere Application Server is prone to a CRLF injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WebSphere Application Server Information Disclosure

The IBM WebSphere Application Server software contains a vulnerability that, if exploited, allows a malicious actor who has passed authentication to gain access to confidential information by using specially crafted requests...

CVE-2016-0359

CVE-2016-0359 is an HTTP response splitting vulnerability in IBM WebSphere Application Server. A remote attacker could exploit a crafted URL to inject arbitrary HTTP headers and split responses. Affected products/versions from the initial doc include IBM WebSphere Application Server: 7.0.x before...

CVE-2016-0359: Undefined Security Weakness

CRLF injection vulnerability in IBM WebSphere Application Server WAS 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 Full before 8.5.5.10, and 8.5 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a...

PT-2016-2328

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 7.0.0.42 IBM WebSphere Application Server versions 8.0 through 8.0.0.12 IBM WebSphere Application Server 8.5 Full versions prior to 8.5.5.10 IBM WebSphere Application Server 8.5 Liberty...

IBM WebSphere Application Server HTTP Response Vulnerability

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. There is a security vulnerability in IBM WAS. A remote...

IBM WebSphere Application Server Privilege Acquisition Vulnerability

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. Liberty Profile is a dynamic server profile for WAS. A privilege acquisition vulnerability exists in IBM WAS Liberty Profile version 8.5.5, which can be exploited to gain user...

[SECURITY] Fedora 22 Update: mirrormanager-1.4.4-5.fc22

MirrorManager tracks all the content provided on a master mirror server, and that of all public and private mirrors of that content. This package contains the application server, database schema and hosted tools...

[SECURITY] Fedora 24 Update: mirrormanager-1.4.4-5.fc24

MirrorManager tracks all the content provided on a master mirror server, and that of all public and private mirrors of that content. This package contains the application server, database schema and hosted tools...

Design/Logic Flaw

NTT Data TERASOLUNA Server Framework for JavaWEB 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname...

CVE-2016-1183

NTT Data TERASOLUNA Server Framework for JavaWEB 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname...

CVE-2016-1183: Undefined Security Weakness

NTT Data TERASOLUNA Server Framework for JavaWEB 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname...