CVE-2009-0900

Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7.0.1.0 allows local users to gain privileges via crafted SSL information in a Client Channel Definition Table CCDT file...

CVE-2009-2747

The Java Naming and Directory Interface JNDI implementation in IBM WebSphere Application Server WAS 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via ...

CVE-2009-2748

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Security feature bypass

The Java Naming and Directory Interface JNDI implementation in IBM WebSphere Application Server WAS 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via ...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2747

The Java Naming and Directory Interface JNDI implementation in IBM WebSphere Application Server WAS 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via ...

CVE-2009-2748

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-1299

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 6.0 through 6.0.2.7 IBM WebSphere MQ versions 7.0 through 7.0.1.0 Description A heap-based buffer overflow issue exists, allowing local users to gain privileges through crafted SSL information in a Client Channel...

PT-2011-1300

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 6.0 through 6.0.2.8 IBM WebSphere MQ versions 7.0 through 7.0.1.0 Description The issue is related to the handling of long group names, which could potentially allow local users to gain privileges by exploiting...

CVE-2009-0900: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7.0.1.0 allows local users to gain privileges via crafted SSL information in a Client Channel Definition Table CCDT file...

CVE-2009-0905: Improper Input Validation

IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial substring...

CVE-2009-2748: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2747: Undefined Security Weakness

The Java Naming and Directory Interface JNDI implementation in IBM WebSphere Application Server WAS 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via ...

PT-2011-1302

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.29 IBM WebSphere Application Server versions 7.1 before 7.0.0.7, but since 7.0.0.7 is less than 7.1, it is more accurate to say 7.0 before 7.0.0.7 and 7.1 before the first version of...

PT-2011-1301

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.0 through 6.0.2.38 IBM WebSphere Application Server versions 6.1 through 6.1.0.28 IBM WebSphere Application Server versions 7.0 through 7.0.0.6 Description The Java Naming and Directory Interface JND...

CVE-2010-0780

IBM WebSphere MQ 7.x before 7.0.1.4 allows remote attackers to cause a denial of service disk consumption via multiple connection attempts to a stopped queue manager...

CVE-2011-1368

The JavaServer Faces JSF application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors...

Code injection

The JavaServer Faces JSF application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors...

Design/Logic Flaw

IBM WebSphere MQ 7.x before 7.0.1.4 allows remote attackers to cause a denial of service disk consumption via multiple connection attempts to a stopped queue manager...

CVE-2011-1368

The JavaServer Faces JSF application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors...