11990 matches found
PT-2014-1405
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.32 IBM WebSphere Application Server versions 8.x through 8.0.0.8 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 WebSphere Virtual Enterprise versions 7.x through...
CVE-2014-0859: Undefined Security Weakness
The web-server plugin in IBM WebSphere Application Server WAS 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, when POST retries are enabled, allows remote attackers to cause a denial of service daemon crash via unspecified vectors...
PT-2014-1409
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 7.x through 7.0.0.32 IBM WebSphere Application Server WAS versions 8.x through 8.0.0.8 IBM WebSphere Application Server WAS versions 8.5.x through 8.5.5.1 Description The issue affects the web-serv...
CVE-2013-6323: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or...
CVE-2014-0857: Exposure of Sensitive Information to an Unauthorized Actor
The Administrative Console in IBM WebSphere Application Server WAS 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote authenticated users to obtain sensitive information via a crafted request...
PT-2014-1302
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 8.0.0 through 8.0.0.8 IBM WebSphere Application Server WAS versions 8.5.x through 8.5.5.1 Description The issue allows remote authenticated users to obtain sensitive information via crafted request...
PT-2014-1403
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.0.0 through 8.0.0.8 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote attackers to read arbitrary files via a crafted URL, potentially giving access ...
Xalan-Java: insufficient constraints in secure processing feature
It was found that the secure processing feature of Xalan-Java had insufficient restrictions defined for certain properties and features. A remote attacker able to provide Extensible Stylesheet Language Transformations XSLT content to be processed by an application using Xalan-Java could use this...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.2 security update
An update for Red Hat JBoss Enterprise Application Platform 6.2.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score,...
CVE-2014-3130
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
CVE-2014-3133
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection...
Design/Logic Flaw
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection...
CVE-2014-3133
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection...
CVE-2014-3130
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
CVE-2014-3133
CVE-2014-3133 affects SAP NetWeaver Java Application Server. The issue is improper access restriction that allows remote attackers to retrieve the list of SAP systems registered on an SLD via an unspecified Web Dynpro component, related to SystemSelection. The vulnerability implies information di...
CVE-2014-3130
Technical details (affected product/version, root cause, exploit information) are not provided in the supplied documents for CVE-2014-3130; monitor for updates.
CVE-2014-3133: Undefined Security Weakness
SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection...
PT-2014-5108
Name of the Vulnerable Software and Affected Versions SAP Netweaver Java Application Server affected versions not specified Description The issue is related to improper access restriction in the SAP Netweaver Java Application Server, allowing remote attackers to obtain the list of SAP systems...
PT-2014-5105
Name of the Vulnerable Software and Affected Versions SAP Netweaver ABAP Application Server affected versions not specified Description The issue concerns the ABAP Help documentation and translation tools BC-DOC-HLP in SAP Netweaver ABAP Application Server, where access is not properly restricted...
CVE-2014-3130: Undefined Security Weakness
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...