CVE-2012-2199

The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service invalid address alignment exception and daemon crash via vectors involving a multiplexed channel...

CVE-2012-2199

The CVE-2012-2199 entry concerns IBM WebSphere MQ 7.x on Solaris. The affected component is the server message channel agent in the queue manager, with vulnerable behavior occurring in versions 7.0.1 before 7.0.1.9, 7.1, and 7.5. The impact is a remote denial of service via a multiplexed channel,...

CVE-2012-3298

Unspecified vulnerability in the REST services framework in IBM WebSphere Commerce 7.0 Feature Pack 4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors...

CVE-2012-3300

IBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are enabled, allows remote attackers to cause a denial of service resource consumption via unspecified vectors...

CVE-2012-2199

The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service invalid address alignment exception and daemon crash via vectors involving a multiplexed channel...

CVE-2012-3304

The Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors...

CVE-2012-3305

Directory traversal vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file...

PT-2012-4643

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 6.1 before 6.1.0.45 IBM WebSphere Application Server WAS versions 7.0 before 7.0.0.25 IBM WebSphere Application Server WAS versions 8.0 before 8.0.0.5 IBM WebSphere Application Server WAS versions...

CVE-2012-3305: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file...

CVE-2012-3311: Undefined Security Weakness

IBM WebSphere Application Server WAS 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for IIOP connections and Optimized Local Adapters, does not perform CBIND checks, which allows local users ...

CVE-2012-3298: Undefined Security Weakness

Unspecified vulnerability in the REST services framework in IBM WebSphere Commerce 7.0 Feature Pack 4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors...

PT-2012-4635

Name of the Vulnerable Software and Affected Versions IBM WebSphere Commerce version 7.0 before 7.0.0.6 Description The issue allows remote attackers to cause a denial of service, resulting in resource consumption, when persistent sessions and personalization IDs are enabled. Recommendations For...

PT-2012-4634

Name of the Vulnerable Software and Affected Versions IBM WebSphere Commerce version 7.0 Feature Pack 4 Description The issue allows remote attackers to obtain sensitive information, modify data, or cause a denial of service. The attackers can exploit this via unspecified vectors in the REST...

PT-2012-4638

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.45 IBM WebSphere Application Server versions 7.0 before 7.0.0.25 IBM WebSphere Application Server versions 8.0 before 8.0.0.5 IBM WebSphere Application Server versions 8.5 before 8.5.0...

CVE-2012-2199: Undefined Security Weakness

The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service invalid address alignment exception and daemon crash via vectors involving a multiplexed channel...

CVE-2012-3306: Undefined Security Weakness

IBM WebSphere Application Server WAS 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors...

CVE-2012-3304: Undefined Security Weakness

The Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors...

CVE-2012-3300: Undefined Security Weakness

IBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are enabled, allows remote attackers to cause a denial of service resource consumption via unspecified vectors...

PT-2012-4640

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 6.1 before 6.1.0.45 IBM WebSphere Application Server WAS versions 7.0 before 7.0.0.25 IBM WebSphere Application Server WAS versions 8.0 before 8.0.0.5 IBM WebSphere Application Server WAS versions...

PT-2012-4639

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.47 IBM WebSphere Application Server versions 7.0 before 7.0.0.25 IBM WebSphere Application Server versions 8.0 before 8.0.0.5 IBM WebSphere Application Server versions 8.5 before 8.5.0...