CVE-2013-4053

The WS-Security implementation in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly...

CVE-2013-4052

Cross-site scripting XSS vulnerability in the UDDI Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-4820

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.47 IBM WebSphere Application Server versions 7.0 before 7.0.0.31 IBM WebSphere Application Server versions 8.0 before 8.0.0.8 IBM WebSphere Application Server versions 8.5 before 8.5.5...

CVE-2013-4052: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the UDDI Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4053: Improper Input Validation

The WS-Security implementation in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly...

IBM WebSphere Application Server 6.1 < Fix Pack 47 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 47 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - A remote attacker can bypass authentication because of improper user validation on Linux, Solaris, and HP-UX platforms that us...

CVE-2013-0596: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-4819

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.47 IBM WebSphere Application Server versions 7.0 before 7.0.0.31 IBM WebSphere Application Server versions 8.0 before 8.0.0.8 IBM WebSphere Application Server versions 8.5 before 8.5.5...

PT-2013-2450

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 6.1.0.47 Description A cross-site scripting XSS issue exists in the Administrative console of IBM WebSphere Application Server, allowing remote attackers to inject arbitrary web script or HTML...

Code injection

The Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term association configurations, allows remote attackers to cause a denial of service via a crafted query...

CVE-2013-2992

The Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term association configurations, allows remote attackers to cause a denial of service via a crafted query...

PT-2013-4084

Name of the Vulnerable Software and Affected Versions IBM WebSphere Commerce versions 7.0 FP4 through 7.0 FP6 Description The issue allows remote attackers to cause a denial of service via a crafted query, specifically in certain search-term association configurations within the Search component...

CVE-2013-2992: Improper Input Validation

The Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term association configurations, allows remote attackers to cause a denial of service via a crafted query...

IBM WebSphere Commerce 拒绝服务漏洞(CVE-2013-2992)

BUGTRAQ ID: 62093 CVECAN ID: CVE-2013-2992 IBM WebSphere Commerce是业界领先的下一代电子商务解决方案。 IBM WebSphere Commerce 7.0在"search"功能的实现上存在拒绝服务漏洞，根据搜索条目关联配置情况，远程攻击者通过特制的查询，利用此漏洞可造成服务停止影响。 0 IBM WebSphere Commerce Enterprise 7.x IBM WebSphere Commerce 7.x 厂商补丁： IBM --- IBM已经为此发布了一个安全公告（21648644）以及相应补丁:...

CVE-2013-4039

IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated users to obtain sensitive information, and consequently bypass intended access restrictions on jobs, via unspecified vectors...

Information disclosure

IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated users to obtain sensitive information, and consequently bypass intended access restrictions on jobs, via unspecified vectors...

CVE-2013-4039

IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated users to obtain sensitive information, and consequently bypass intended access restrictions on jobs, via unspecified vectors...

CVE-2013-4039: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated users to obtain sensitive information, and consequently bypass intended access restrictions on jobs, via unspecified vectors...

PT-2013-4808

Name of the Vulnerable Software and Affected Versions IBM WebSphere Extended Deployment Compute Grid version 8.0 before 8.0.0.3 Description The issue allows remote authenticated users to obtain sensitive information and bypass intended access restrictions on jobs. Recommendations For IBM WebSpher...

CVE-2013-0566

Multiple cross-site scripting XSS vulnerabilities in the 1 Accelerator JSPs, 2 Organization Administration Console JSPs, and 3 Administration Console JSPs in WebSphere Commerce Tools in IBM WebSphere Commerce 5.6.1.0 through 5.6.1.5, 6.0.0.0 through 6.0.0.11, and 7.0.0.0 through 7.0.0.7 allow...