Code injection

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5390

Cross-site scripting XSS vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5393

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors...

CVE-2013-5390

CVE-2013-5390 affects IBM WebSphere eXtreme Scale monitoring console (versions 7.1.0, 7.1.1, 8.5.0, 8.6.0). It is a cross-site scripting vulnerability in the monitoring console that allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors. Root cause: XSS in the c...

PT-2013-5511

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale versions 7.1.0 through 8.6.0 Description A cross-site scripting XSS issue exists in the monitoring console, allowing remote authenticated users to inject arbitrary web script or HTML. This could potentially lead to...

PT-2013-5513

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale versions 7.1.0 through 8.6.0 Description The issue allows remote authenticated users to conduct phishing attacks. Recommendations For versions 7.1.0 through 8.6.0, update to a version that contains a fix for this...

PT-2013-5512

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale versions 7.1.0 through 8.6.0 Description The monitoring console in IBM WebSphere eXtreme Scale does not properly process logoff actions. This issue has unspecified impact and remote attack vectors. Recommendations F...

CVE-2013-5393: Undefined Security Weakness

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors...

CVE-2013-5394: Improper Input Validation

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors...

CVE-2013-5390: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5403

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors...

CVE-2013-5403: Undefined Security Weakness

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors...

PT-2013-5518

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance versions 2.0 through 2.5.0.1 Description The issue allows remote attackers to obtain administrative access via unknown vectors. Recommendations For versions 2.0 through 2.5.0.1, update to a version that...

IBM WebSphere Service Registry and Repository Installed

IBM WebSphere Service Registry and Repository, a software life cycle management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70069; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2013-4052

Cross-site scripting XSS vulnerability in the UDDI Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

The WS-Security implementation in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly...

Cross site scripting

Cross-site scripting XSS vulnerability in the UDDI Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4053

CVE-2013-4053 refers to IBM WebSphere Application Server WS-Security with XML Digital Signature using a trust store, where improper certificate verification could let a remote attacker gain privileged access. Affected products/versions include WebSphere Application Server 8.5, 8.0, 7.0, and 6.1 (...