CVE-2014-0917: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0918: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IBM Eclipse Help System IEHS in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL...

IBM WebSphere Application Server 8.5 < Fix Pack 8.5.5.1 Multiple Vulnerabilities

IBM WebSphere Application Server 8.5 before Fix Pack 8.5.5.1 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities : - A flaw exists related to Apache Ant and file compression that could lead to denial of service conditions. CVE-2012-209...

Cross site scripting

Cross-site scripting XSS vulnerability in workingSet.jsp in IBM Eclipse Help System IEHS, as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and 5.2.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5449: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in workingSet.jsp in IBM Eclipse Help System IEHS, as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and 5.2.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0464

CVE-2013-0464 is an XSS vulnerability in the IBM Eclipse Help System (IEHS) shipped with multiple IBM products. The issue affects IEHS versions 3.4.3 and 3.6.2, used by IBM SPSS Data Collection (versions 6.0, 6.0.1, 7.0) and by WebSphere-related components, allowing remote attackers to inject arb...

CVE-2013-0464

Multiple cross-site scripting XSS vulnerabilities in IBM Eclipse Help System IEHS 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0464: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Eclipse Help System IEHS 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2013-2359

Name of the Vulnerable Software and Affected Versions IBM Eclipse Help System versions 3.4.3 through 3.6.2 IBM SPSS Data Collection versions 6.0 through 7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL, potentially leading to cross-site...

CVE-2013-0599: Exposure of Sensitive Information to an Unauthorized Actor

IBM Eclipse Help System IEHS, as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP...

PT-2013-2453

Name of the Vulnerable Software and Affected Versions IBM Eclipse Help System IEHS versions 5.1.1 through 5.1.1.2 IBM Eclipse Help System IEHS versions 5.2 through 5.2.1 Description The issue allows remote attackers to obtain sensitive information by providing a crafted parameter path and then...

Code injection

IBM Eclipse Help System IEHS, as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL...

PT-2013-2362

Name of the Vulnerable Software and Affected Versions IBM Eclipse Help System IEHS versions 3.1 and 3.1.1 Description The issue allows remote authenticated users to read source code via a crafted URL. Recommendations For IBM Eclipse Help System IEHS versions 3.1 and 3.1.1, consider restricting...

CVE-2013-0467: Undefined Security Weakness

IBM Eclipse Help System IEHS, as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL...

CVE-2012-2159

Open redirect vulnerability in IBM Eclipse Help System IEHS, as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...

PT-2012-3845

Name of the Vulnerable Software and Affected Versions IBM Eclipse Help System IEHS versions 7.x through 8.5 IBM Security AppScan Source versions 7.x through 8.5 IBM SPSS Data Collection Developer Library versions 6.0 through 6.0.1 Description A cross-site scripting XSS issue exists, allowing remo...

CVE-2012-2159: Improper Input Validation

Open redirect vulnerability in IBM Eclipse Help System IEHS, as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...

PT-2012-3844

Name of the Vulnerable Software and Affected Versions IBM Eclipse Help System IEHS versions 7.x through 8.5 IBM Security AppScan Source versions 7.x through 8.5 IBM SPSS Data Collection Developer Library versions 6.0 through 6.0.1 Description The issue allows remote attackers to redirect users to...

CVE-2012-2161: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in deferredView.jsp in IBM Eclipse Help System IEHS, as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL...