5712 matches found
CVE-2009-0900
CVE-2009-0900 affects the IBM WebSphere MQ Client 6.x (pre-6.0.2.7) and 7.x (pre-7.0.1.0). The issue is a heap-based buffer overflow in the client when processing a Client Channel Definition Table (CCDT) file, which an attacker can exploit by supplying a crafted CCDT. This could allow a local use...
CVE-2009-0900
Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7.0.1.0 allows local users to gain privileges via crafted SSL information in a Client Channel Definition Table CCDT file...
CVE-2009-2748
Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-2747
The Java Naming and Directory Interface JNDI implementation in IBM WebSphere Application Server WAS 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via ...
Security feature bypass
The Java Naming and Directory Interface JNDI implementation in IBM WebSphere Application Server WAS 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via ...
Cross site scripting
Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-2748
Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-2747
The Java Naming and Directory Interface JNDI implementation in IBM WebSphere Application Server WAS 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via ...
CVE-2010-0780
IBM WebSphere MQ 7.x before 7.0.1.4 allows remote attackers to cause a denial of service disk consumption via multiple connection attempts to a stopped queue manager...
CVE-2011-1368
The JavaServer Faces JSF application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors...
Design/Logic Flaw
IBM WebSphere MQ 7.x before 7.0.1.4 allows remote attackers to cause a denial of service disk consumption via multiple connection attempts to a stopped queue manager...
Code injection
The JavaServer Faces JSF application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors...
CVE-2011-1368
The JavaServer Faces JSF application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors...
CVE-2010-0780
CVE-2010-0780 affects IBM WebSphere MQ 7.x up to 7.0.1.3 (before 7.0.1.4). Affected component: WebSphere MQ queue manager handling; vulnerability allows remote attackers to cause a denial of service through repeated connection attempts to a stopped queue manager, leading to disk consumption. Root...
CVE-2011-1371
Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an Unknown Error document, a different vulnerability than CVE-2011-4171...
Cross site scripting
Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an Unknown Error document, a different vulnerability than CVE-2011-4171...
CVE-2011-1371
CVE-2011-1371 is described as a cross-site scripting (XSS) vulnerability in IBM WebSphere ILOG Rule Team Server 7.1.1, specifically affecting the file content/error.jsp. Publicly provided descriptions indicate two related vectors: (1) via vectors that trigger an Unknown Error document (the CVE-20...
CVE-2011-4171
Cross-site scripting XSS vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the project parameter to teamserver/faces/home.jsp...
Authentication flaw
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors...