CVE-2014-4764

IBM WebSphere Application Server WAS 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service Load Balancer crash via unspecified vectors...

CVE-2014-0965

CVE-2014-0965 affects IBM WebSphere Application Server (WAS) with information disclosure via crafted SOAP responses. Affected versions are WAS 7.0.x before 7.0.0.33, WAS 8.0.x before 8.0.0.9, and WAS 8.5.x before 8.5.5.3. The root cause is improper handling of SOAP responses, enabling remote atta...

CVE-2014-3022

CVE-2014-3022 affects IBM WebSphere Application Server (WAS) 7.0.x prior to 7.0.0.33, 8.0.x prior to 8.0.0.9, and 8.5.x prior to 8.5.5.3. The issue allows remote attackers to obtain sensitive information via a crafted URL that triggers an error condition, i.e., information disclosure through erro...

CVE-2014-4764

CVE-2014-4764 affects IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 when the Load Balancer for IPv4 Dispatcher is enabled. The vulnerability allows remote attackers to cause a denial of service by crashing the Load Balancer, via unspecified vectors. The cur...

CVE-2014-4767

CVE-2014-4767 affects IBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.3. A flaw in using the Liberty Repository for feature installation lets remote authenticated users execute arbitrary code via unspecified vectors. Impact is arbitrary code execution on affected Liberty deplo...

CVE-2014-3022

IBM WebSphere Application Server WAS 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted URL that triggers an error condition...

CVE-2014-3070: Undefined Security Weakness

The addFileRegistryAccount Virtual Member Manager VMM SPI Admin Task in IBM WebSphere Application Server WAS 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly create accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2014-4767: Improper Control of Generation of Code

IBM WebSphere Application Server WAS Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2014-4764: Undefined Security Weakness

IBM WebSphere Application Server WAS 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service Load Balancer crash via unspecified vectors...

PT-2014-5074

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0.x through 7.0.0.34 IBM WebSphere Application Server versions 8.0.x through 8.0.0.9 IBM WebSphere Application Server versions 8.5.x through 8.5.5.2 Description The issue allows remote attackers to...

PT-2014-5027

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 7.0.x through 7.0.0.32 IBM WebSphere Application Server WAS versions 8.0.x through 8.0.0.8 IBM WebSphere Application Server WAS versions 8.5.x through 8.5.5.2 Description The issue allows remote...

PT-2014-5063

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.0.x through 8.0.0.9 IBM WebSphere Application Server versions 8.5.x through 8.5.5.2 Description The issue is related to the addFileRegistryAccount Virtual Member Manager VMM SPI Admin Task in IBM...

PT-2014-6109

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS Liberty Profile versions 8.5.x through 8.5.5.2 Description The issue arises from improper use of the Liberty Repository for feature installation, allowing remote authenticated users to execute arbitrary cod...

PT-2014-6106

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 8.0.x before 8.0.0.10 IBM WebSphere Application Server WAS versions 8.5.x before 8.5.5.3 Description The issue allows remote attackers to cause a denial of service, resulting in a Load Balancer...

CVE-2014-3022: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server WAS 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted URL that triggers an error condition...

CVE-2014-0965: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server WAS 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted SOAP response...

PT-2014-3981

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 7.0.x through 7.0.0.32 IBM WebSphere Application Server WAS versions 8.0.x through 8.0.0.8 IBM WebSphere Application Server WAS versions 8.5.x through 8.5.5.2 Description The issue allows remote...

CVE-2014-3083: Undefined Security Weakness

IBM WebSphere Application Server WAS 7.0.x before 7.0.0.35, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.3 does not properly restrict resource access, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2014-3472

The isCallerInRole function in SimpleSecurityManager in JBoss Application Server AS 7, as used in Red Hat JBoss Enterprise Application Platform JBEAP 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors...

Design/Logic Flaw

The isCallerInRole function in SimpleSecurityManager in JBoss Application Server AS 7, as used in Red Hat JBoss Enterprise Application Platform JBEAP 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors...