CVE-2007-3960

CVE-2007-3960 affects IBM WebSphere Application Server 6.0.x before Fix Pack 21 (6.0.2.21). Connected sources indicate multiple vulnerabilities, including at least one where the web container may emit response data intended for a different request after a closed connection error (PK41446) and oth...

CVE-2007-3397

The web container in IBM WebSphere Application Server WAS before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information...

CVE-2007-3263

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."...

CVE-2007-3265

Cross-site scripting XSS vulnerability in the Samples component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Authorization

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."...

CVE-2007-3264

Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Samples component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors...

CVE-2007-3265

Cross-site scripting XSS vulnerability in the Samples component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3265

CVE-2007-3265 is a Cross-site scripting (XSS) vulnerability in the Samples component of IBM WebSphere Application Server (WAS) up to version 6.1.0.7 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product: IBM WAS (Samples co...

CVE-2007-3264

Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors...

CVE-2006-7198

Unspecified vulnerability in IBM WebSphere Application Server WAS before 5.1.1.14, and WAS for z/OS 601 before 6.0.2.13, has unknown impact and attack vectors, related to a "Potential security exposure," aka PK26123...

CVE-2006-7198

Unspecified vulnerability in IBM WebSphere Application Server WAS before 5.1.1.14, and WAS for z/OS 601 before 6.0.2.13, has unknown impact and attack vectors, related to a "Potential security exposure," aka PK26123...

IBM WebSphere multiple security vulnerabilities

Double free vulnerability, Servlet Engine vulnerabilities...

Double free

The Java Message Service JMS in IBM WebSphere Application Server WAS before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release of a bytebuffer input stream," possibly a double free vulnerability...

Code injection

Unspecified vulnerability in the Servlet Engine/Web Container in IBM WebSphere Application Server WAS before 6.1.0.7 has unknown impact and attack vectors...

CVE-2007-1944

The Java Message Service JMS in IBM WebSphere Application Server WAS before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release of a bytebuffer input stream," possibly a double free vulnerability...

CVE-2007-1945

Unspecified vulnerability in the Servlet Engine/Web Container in IBM WebSphere Application Server WAS before 6.1.0.7 has unknown impact and attack vectors...

CVE-2007-1944

The Java Message Service JMS in IBM WebSphere Application Server WAS before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release of a bytebuffer input stream," possibly a double free vulnerability...

CVE-2007-1945

Unspecified vulnerability in the Servlet Engine/Web Container in IBM WebSphere Application Server WAS before 6.1.0.7 has unknown impact and attack vectors...