CVE-2011-1317

Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages JSP component in IBM WebSphere Application Server WAS 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service memory consumption by sending many JSP requests that trigger...

CVE-2011-1312

The Administrative Console component in IBM WebSphere Application Server WAS 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a 1 user or 2 gro...

CVE-2011-1316

The Session Initiation Protocol SIP Proxy in the HTTP Transport component in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service worker thread exhaustion and UDP messaging outage by sending many UDP messages...

CVE-2011-1322

The SOAP with Attachments API for Java SAAJ implementation in the Web Services component in IBM WebSphere Application Server WAS 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service memory consumption via encrypted SOAP messages...

CVE-2011-1320

The Security component in IBM WebSphere Application Server WAS 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server TIP/eWAS framework is used, does not properly delete AuthCache entries upon a logout, which might allow remote...

CVE-2011-1315

CVE-2011-1315 affects IBM WebSphere Application Server (WAS) regarding a memory leak in the messaging engine that can lead to denial of service via network connections tied to a NULL return value from a synchronous JMS receive call. The vulnerability is documented across multiple feeds (NVD, Red ...

CVE-2011-1307

CVE-2011-1307 : IBM WebSphere Application Server (WAS) prior to 7.0.0.15 uses 777 permissions for a temporary log directory in its installer, enabling local users to access log files via standard filesystem operations. This is described as a separate issue from CVE-2009-1173; affected product/ver...

CVE-2011-1319

The Security component in IBM WebSphere Application Server WAS 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote authenticated users to cause a denial of service memory consumption by using a Lightweight Third-Party Authentication LTPA token for authentication...

CVE-2011-1313

CVE-2011-1313 affects IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.35 and 7.x before 7.0.0.15. Root cause: a double-free in the ORB_Request::getACRWorkElementPtr path triggered by IIOP request handling, enabling remote backend IIOP servers to cause a denial of service (S0C4 ABEND and...

JVN#26301278: IBM WebSphere Application Server vulnerable to denial-of-service (DoS)

IBM WebSphere Application Server contains a denial-of-service DoS vulnerability due to an issue in Java Runtime Environment JRE. Impact A remote attacker may cause a denial-of-service DoS. Solution Apply a patch Apply the appropriate patch according to the information provided by the developer...

IBM WebSphere Application Server (WAS) Security Bypass Vulnerability

The host is running IBM WebSphere Application Server and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodibmwassecbypassvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server WAS Security Bypass Vulnerability Authors: Antu Sanadi Copyright:...

IBM WebSphere Portal Server input validation vulnerability

Overview IBM WebSphere Portal Server does not validate entry path inputted data. Description From the IBM Portal website: "IBM WebSphere Portal software provides a composite application or business mashup framework and the advanced tooling needed to build flexible, SOA-based solutions, as well as...

CVE-2008-7274

IBM WebSphere Application Server WAS 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by 1 not providing a password or 2 providing an empty password...

Default credentials

IBM WebSphere Application Server WAS 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by 1 not providing a password or 2 providing an empty password...

CVE-2008-7274

IBM WebSphere Application Server WAS 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by 1 not providing a password or 2 providing an empty password...

IBM WebSphere Application Server Multiple Vulnerabilities

IBM WebSphere Application Server WAS is prone to an information- disclosure vulnerability and to a cross-site scripting vulnerability. This issue affects WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15. OpenVAS Vulnerability Test $Id: gbibmwas45800.nasl 7015 2017-08-28 11:51:24Z teissa $ IBM...

Buffer overflow

Buffer overflow in IBM WebSphere MQ 7.0 before 7.0.1.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted header field in a message...

CVE-2011-0310

Buffer overflow in IBM WebSphere MQ 7.0 before 7.0.1.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted header field in a message...

CVE-2011-0310

Buffer overflow in IBM WebSphere MQ 7.0 (prior to 7.0.1.4) allows remote attackers to execute arbitrary code or cause a denial of service (application crash) through a crafted header field in a message. The issue originates in the handling of header fields, enabling code execution or service disr...

IBM WebSphere Application Server 6.1 < 6.1.0.35 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 35 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - An unspecified cross-site scripting vulnerability exists in the Administration Console. PM14251 - A double free error in BBOOORBR...