5712 matches found
IBM WebSphere Application Server 7.0 < Fix Pack 9
IBM WebSphere Application Server 7.0 before Fix Pack 9 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - An unspecified cross-site scripting vulnerability in the Administration Console. PK97376 - An error when defining a wsadmin scripting...
IBM WebSphere Application Server 6.1 < 6.1.0.31 Multiple Vulnerabilities
IBM WebSphere Application Server 6.1 before Fix Pack 31 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - It is possible for Administrator role members to modify primary administrative id via the administrative console. PK88606 - An...
IBM WebSphere Application Server 6.1 < 6.1.0.7 Multiple Vulnerabilities
IBM WebSphere Application Server 6.1 before Fix Pack 7 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - An unspecified denial of service vulnerability in the Java Message Service JMS. - An unspecified vulnerability in the Servlet...
IBM WebSphere Application Server 6.0 < 6.0.2.21 Multiple Vulnerabilities
IBM WebSphere Application Server 6.0.x before Fix Pack 21 appears to be running on the remote host. Such versions are reportedly affected by multiple vulnerabilities. - The web container sends response data intended for a different request in certain circumstances after a closed connection error...
IBM WebSphere Application Server 6.0 < 6.0.2.23 Unspecified Vulnerability (PK45726)
IBM WebSphere Application Server 6.0.x before Fix Pack 23 appears to be running on the remote host. Such versions are reportedly affected by an unspecified vulnerability in the Administrative Scripting Tools. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45418;...
IBM WebSphere Application Server 6.1 < 6.1.0.13 Multiple Vulnerabilities
IBM WebSphere Application Server 6.1 before Fix Pack 13 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - Multiple cross-site request forgery vulnerabilities exist in 'uddigui/navigateTree.do' in the UDDI user console. PK50245 - An...
IBM WebSphere Application Server 6.0 < 6.0.2.17 Multiple Vulnerabilities
IBM WebSphere Application Server 6.0.x before Fix Pack 17 appears to be running on the remote host. Such versions are reportedly affected by multiple vulnerabilities. - An unspecified vulnerability in the Utility Classes. PK29725 - When 'ibm-web-ext.xmi' sets 'fileServingEnabled' to true and...
IBM WebSphere Application Server < 6.1.0.15 Multiple Vulnerabilities
IBM WebSphere Application Server 6.1 before Fix Pack 15 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - There is an as-yet unspecified security exposure in wsadmin PK45726. - Sensitive information might appear in plaintext in the...
IBM WebSphere应用服务器wsadmin脚本执行信息泄露漏洞
CVE ID: CVE-2010-0769 IBM Websphere应用服务器以Java和Servlet引擎为基础，支持多种HTTP服务，可帮助用户完成从开发、发布到维护交互式的动态网站的所有工作。 WebSphere应用服务器没有正确地定义wsadmin脚本化J2CConnectionFactory对象，本地用户可以通过从 resources.xml文件中读取明文字段获得KeyRingPassword口令。 IBM Websphere Application Server 7.0.x IBM Websphere Application Server 6.1.x IBM Websphe...
IBM WebSphere应用服务器Orb客户端远程拒绝服务漏洞
BUGTRAQ ID: 39056 CVE ID: CVE-2010-0770 IBM Websphere应用服务器以Java和Servlet引擎为基础，支持多种HTTP服务，可帮助用户完成从开发、发布到维护交互式的动态网站的所有工作。 WebSphere应用服务器在处理ORB客户端的SSL握手时存在拒绝服务漏洞，已认证的攻击者可以通过终止SSL握手导致ORB ListenerThread挂起，新的客户端无法连接。 IBM Websphere Application Server 7.0.x IBM Websphere Application Server 6.1.x IBM...
CVE-2010-0769
IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file...
CVE-2010-0770
IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service ORB ListenerThread hang by aborting an SSL handshake...
Default credentials
IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file...
Cross site scripting
Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote attackers to inject arbitrary web script or HTML via the URI...
CVE-2010-0768
CVE-2010-0768 is an XSS flaw in IBM WebSphere Application Server Administration Console. Affected products are WAS 6.0 before 6.0.2.41, WAS 6.1 before 6.1.0.31, and WAS 7.0 before 7.0.0.9, where arbitrary web script or HTML could be injected via the URI. Public sources in connected documents corr...
CVE-2010-0770
IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service ORB ListenerThread hang by aborting an SSL handshake...
CVE-2010-0768
Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote attackers to inject arbitrary web script or HTML via the URI...
IBM WebSphere Application Server multiple vulnerabilities
IBM WebSphere Application Server WAS is prone to multiple vulnerabilities. 1. A cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...
IBM WebSphere Application Server Multiple Vulnerabilities (swg27004980)
IBM WebSphere Application Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...