Directory traversal

Directory traversal vulnerability in the administration console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, and 8.0 before 8.0.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

PT-2011-3083

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.41 IBM WebSphere Application Server versions 7.0 before 7.0.0.19 IBM WebSphere Application Server versions 8.0 before 8.0.0.1 Description A directory traversal issue exists in the...

CVE-2011-1359: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the administration console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, and 8.0 before 8.0.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Cross site scripting

Cross-site scripting XSS vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository WSRR 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

PT-2011-3082

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3 through 6.3.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.0 through 7.0.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.5 through 7.5.0.1...

CVE-2011-1357: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository WSRR 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

IBM WebSphere Application Multiple Vulnerabilities Jul-11

The host is running IBM WebSphere Application Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmwasmultiplevulnjul11.nasl 7019 2017-08-29 11:51:27Z teissa $ IBM WebSphere Application Multiple Vulnerabilities Jul-11 Authors: Antu sanadi Copyright: Copyright ...

IBM WebSphere Application Server Multiple CSRF Vulnerabilities

The host is running IBM WebSphere Application Server and is prone to cross-site request forgery vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmwasadminconsolecsrfvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server Multiple CSRF Vulnerabilities Authors: Shashi...

IBM WebSphere Application Server < 7.0.0.14 Multiple CSRF Vulnerabilities

IBM WebSphere Application Server is prone to cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Open redirect

Open redirect vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter...

Design/Logic Flaw

IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request...

CVE-2011-1356

IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request...

CVE-2011-1355

Open redirect vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter...

CVE-2011-1355

CVE-2011-1355 affects IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19. The vulnerability is an open redirect via the logoutExitPage parameter, allowing remote attackers to redirect users to arbitrary sites and potentially enable phishing. Multiple connected sour...

PT-2011-3081

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 6.1 before 6.1.0.39 IBM WebSphere Application Server WAS versions 7.0 before 7.0.0.19 Description The issue allows local users to obtain sensitive stack-trace information via a crafted Administrati...

PT-2011-3080

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.39 IBM WebSphere Application Server versions 7.0 before 7.0.0.19 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via...

CVE-2011-1356: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request...

CVE-2011-1355: Improper Input Validation

Open redirect vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Integrated Solutions Console aka administrative console in IBM WebSphere Application Server WAS 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that disable certain security...

CVE-2010-3271

Multiple cross-site request forgery CSRF vulnerabilities in the Integrated Solutions Console aka administrative console in IBM WebSphere Application Server WAS 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that disable certain security...