CVE-2014-3056

The Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors...

CVE-2014-3055

CVE-2014-3055 is described in public sources as an SQL injection vulnerability in the Unified Task List Portlet of IBM WebSphere Portal 7.x and 8.x up to 8.0.0.1 CF12 . The vulnerability affects the portlet itself and allows remote attackers to execute arbitrary SQL commands via unspecified vecto...

CVE-2014-3055

SQL injection vulnerability in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-3054

Multiple open redirect vulnerabilities in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2014-3054

CVE-2014-3054 refers to multiple open redirects in the Unified Task List (UTL) Portlet of IBM WebSphere Portal 7.x and 8.x up to 8.0.0.1 CF12. The open redirect flaw could allow remote attackers to redirect users to arbitrary sites and potentially facilitate phishing via unspecified vectors. Conn...

CVE-2014-3057

Cross-site scripting XSS vulnerability in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-3054: Undefined Security Weakness

Multiple open redirect vulnerabilities in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2014-5051

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 8.0.0.1 CF12 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. This affects the Unified Task List UTL Portlet...

CVE-2014-3057: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2014-5049

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 8.0.0.1 CF12 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. Recommendations For IBM WebSphere Portal versions 7.x through 8.0.0.1 CF12, update to...

PT-2014-5050

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 8.0.0.1 CF12 Description The issue allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions. Recommendations For versions 7.x through 8.0.0.1 CF1...

CVE-2014-3056: Exposure of Sensitive Information to an Unauthorized Actor

The Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors...

PT-2014-5048

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 8.0.0.1 CF12 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. Recommendations For versions 7.x through 8.0.0.1 CF12, update to a...

CVE-2014-3055: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

IBM Websphere Application Server 2.0./3.0/3.0.2 .1 Showcode Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1500/info Certain versions of the IBM WebSphere application server ship with a vulnerability which allows malicious users to view the source of any document which resides in the web document root directory. This is possib...

IBM WebSphere Application Server 6.1/7.0 Administrative Console Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34001/info IBM WebSphere Application Server WAS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

IBM WebSphere MQ File Transfer Edition Web Gateway CSRF Vulnerability

No description provided by source. Exploit Author: Nir Valtman Description: Malicious user is able to add userspace, change permissions on existing userspace and add MQMD MQ Message Descriptor user IDs. All of the these vulnerabilities can be exploited using a CSRF Cross Site Request Forgery...

IBM Websphere/Net.Commerce 3 CGI-BIN Macro Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2588/info Net.Commerce is part of the Websphere platform of products distributed by IBM. Net.Commerce provides several versatile features to facilitate e-commerce, and features in performance and reliability. A problem in...

IBM Websphere Application Server 3.0.2 Server Plugin DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1691/info Large amounts of data ie 1092+ characters in the Host: request header may cause the web server process to fault on signal 11 SIGSEGV or signal 10 SIGBUS. GET /servletsnoop HTTP/1.0 Host:...

IBM Websphere Edge Server 3.69/4.0 HTTP Header Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6001/info A vulnerability has been discovered in the Caching Proxy component bundled with the IBM Websphere Edge Server. Due to insufficient sanitization of user-supplied input it is possible for an attacker to construct ...