CVE-2011-1322

The SOAP with Attachments API for Java SAAJ implementation in the Web Services component in IBM WebSphere Application Server WAS 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service memory consumption via encrypted SOAP messages...

CVE-2011-1307

CVE-2011-1307 : IBM WebSphere Application Server (WAS) prior to 7.0.0.15 uses 777 permissions for a temporary log directory in its installer, enabling local users to access log files via standard filesystem operations. This is described as a separate issue from CVE-2009-1173; affected product/ver...

CVE-2011-1308

IBM WebSphere Application Server (WAS) versions affected by CVE-2011-1308 include the Installation Verification Test (IVT) in the Install component up to 7.0.0.15. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspec...

CVE-2011-1313

CVE-2011-1313 affects IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.35 and 7.x before 7.0.0.15. Root cause: a double-free in the ORB_Request::getACRWorkElementPtr path triggered by IIOP request handling, enabling remote backend IIOP servers to cause a denial of service (S0C4 ABEND and...

CVE-2011-1315

CVE-2011-1315 affects IBM WebSphere Application Server (WAS) regarding a memory leak in the messaging engine that can lead to denial of service via network connections tied to a NULL return value from a synchronous JMS receive call. The vulnerability is documented across multiple feeds (NVD, Red ...

CVE-2011-1317

CVE-2011-1317 affects IBM WebSphere Application Server (WAS) JSP component WASJSPStrBufferImpl, where a memory leak can be triggered by large JSP responses. Affects WAS 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15. Exploitation could lead to denial of service via memory consumption by sending ...

CVE-2011-1318

CVE-2011-1318 affects IBM WebSphere Application Server (WAS) before 7.0.0.15. The vulnerability is a memory leak in org.apache.jasper.runtime.JspWriterImpl.response within the JSP component, which allows remote attackers to cause a denial of service (memory consumption) by repeatedly stopping and...

CVE-2011-1319

The CVE-2011-1319 issue affects IBM WebSphere Application Server 6.1.x before 6.1.0.35 and 7.x before 7.0.0.15. The vulnerability allows remote authenticated users to cause a denial of service via a Lightweight Third-Party Authentication (LTPA) token. Public references confirm the impact as memor...

PT-2011-3041

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1.0.x through 6.1.0.34 IBM WebSphere Application Server versions 7.x through 7.0.0.14 Description The issue allows local users to obtain potentially sensitive information by reading the...

PT-2011-3038

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.15 Description The issue concerns the installer in IBM WebSphere Application Server, which sets 777 permissions for a temporary log directory. This setting allows local users to access l...

PT-2011-3052

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1.0.x through 6.1.0.36 IBM WebSphere Application Server versions 7.x through 7.0.0.14 Description The issue is related to the AuthCache purge implementation in the Security component, which fails to...

PT-2011-3039

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.15 Description A cross-site scripting XSS issue exists in the Installation Verification Test IVT application, allowing remote attackers to inject arbitrary web script or HTML...

PT-2011-3053

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1.0.x through 6.1.0.36 IBM WebSphere Application Server versions 7.x through 7.0.0.14 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, via...

PT-2011-3040

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.15 Description The issue is related to the Plug-in component in IBM WebSphere Application Server, which does not properly handle trace requests. This has an unspecified impact and attack...

PT-2011-3051

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1.0.x through 6.1.0.34 IBM WebSphere Application Server versions 7.x through 7.0.0.14 Description The issue arises when the Tivoli Integrated Portal / embedded WebSphere Application Server framework ...

PT-2011-3049

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.15 Description The issue is related to a memory leak in the JavaServer Pages JSP component. This memory leak occurs in the org.apache.jasper.runtime.JspWriterImpl.response and can be...

PT-2011-3046

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.15 Description A memory leak in the messaging engine allows remote attackers to cause a denial of service via network connections associated with a NULL return value from a synchronous J...

PT-2011-3048

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1.0.x through 6.1.0.36 IBM WebSphere Application Server versions 7.x through 7.0.0.14 Description A memory leak in the JavaServer Pages JSP component allows remote attackers to cause a denial of...

PT-2011-3043

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1.0.x through 6.1.0.30 IBM WebSphere Application Server versions 7.x through 7.0.0.14 Description The issue concerns the Administrative Console component in IBM WebSphere Application Server, where it...

PT-2011-3044

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1.0.x through 6.1.0.34 IBM WebSphere Application Server versions 7.x through 7.0.0.14 Description A double free issue allows remote backend IIOP servers to cause a denial of service, resulting in a...