CVE-2014-0828: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WCM Web Content Manager UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF11 allows remote attackers to inject arbitrary web script or HTML via unspecified...

IBM WebSphere Portal Tagging Reflected XSS (PM96047)

The version of WebSphere Portal on the remote host is affected by a reflected cross-site scripting vulnerability in the tagging system. An attacker can craft a request that executes arbitrary script code in a user's browser. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

IBM WebSphere Portal Improper Access Control Checks (PI07185)

The version of IBM WebSphere Portal on the remote host is affected by a remote information disclosure vulnerability in the WCM Path Traversal component. An attacker can bypass access control checks and search for items of which the user should not have access. %NASLMINLEVEL 70300 C Tenable Networ...

CVE-2013-5401

The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...

Command injection

The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...

CVE-2013-5401

The CVE-2013-5401 entry concerns IBM WebSphere MQ Internet Pass-Thru (MQIPT) 2.x, where the command-port listener can be leveraged to cause a denial of service (remote-administration outage). The vulnerability is described as being exploitable via unspecified vectors, with affected versions being...

CVE-2013-5401

The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...

CVE-2013-5401: Undefined Security Weakness

The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...

PT-2014-2922

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ Internet Pass-Thru MQIPT versions 2.0 through 2.1.0.0 Description The issue affects the command-port listener, allowing remote attackers to cause a denial of service, which results in a remote-administration outage. The exact...

IBM WebSphere Portal Oracle Outside In Technology Component Remote DoS (PI10280)

The version of IBM WebSphere Portal on the remote host is affected by a denial of service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid72903; scriptversion"1.9";...

CVE-2013-6730

IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF10, when the wcm.path.traversal.security setting is enabled, allows remote attackers to bypass intended read restrictions on an item by accessing that item...

Design/Logic Flaw

IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF10, when the wcm.path.traversal.security setting is enabled, allows remote attackers to bypass intended read restrictions on an item by accessing that item...

CVE-2013-6730

IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF10, when the wcm.path.traversal.security setting is enabled, allows remote attackers to bypass intended read restrictions on an item by accessing that item...

PT-2014-3180

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.1.0.x through 6.1.0.6 CF27 IBM WebSphere Portal versions 6.1.5.x through 6.1.5.3 CF27 IBM WebSphere Portal versions 7.0.0.x before 7.0.0.2 CF27 IBM WebSphere Portal versions 8.0.0.x before 8.0.0.1 CF10 Descripti...

CVE-2013-6730: Undefined Security Weakness

IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF10, when the wcm.path.traversal.security setting is enabled, allows remote attackers to bypass intended read restrictions on an item by accessing that item...

IBM WebSphere MQ Telemetry安全绕过漏洞

Bugtraq ID:65897 CVE ID:CVE-2013-4054 IBM WebSphere MQ Telemetry将WebSphere MQ提供的通用信息主干扩展到了大范围的远程遥感器、传动器和遥测设备。 IBM WebSphere MQ Telemetry不正确过滤用户提交的URL请求，允许远程攻击者利用漏洞绕过限制访问WebContent目录之外的文件内容。 0 IBM WebSphere MQ Telemetry 7.5 厂商补丁： IBM ----- IBM WebSphere MQ Telemetry 7.5.0.3已经修复该漏洞，建议用户下载更新：...

CVE-2013-4054

Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI...

Directory traversal

Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI...

CVE-2013-4054

Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI...

PT-2014-2734

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ version 7.5 before 7.5.0.3 Description A directory traversal issue in WMQ Telemetry allows remote attackers to read arbitrary files by using a crafted URI. Recommendations For IBM WebSphere MQ version 7.5 before 7.5.0.3, updat...