6769 matches found
CVE-2008-1130
IBM WebSphere MQ vulnerable to authentication bypass on queue-manager access via an SVRCONN (MQ client) channel. Affected: WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 (also described as 5.1–5.3 and 6.0). Root cause: error in authentication check for a security exit/connection han...
CVE-2008-1130: Improper Authentication
Unspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 allows attackers to bypass access restrictions for a queue manager via a SVRCONN MQ client channel...
Design/Logic Flaw
Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server WAS before 6.0.2 Fix Pack 25 6.0.2.25 has unknown impact and attack vectors...
CVE-2008-0741
Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server WAS before 6.0.2 Fix Pack 25 6.0.2.25 has unknown impact and attack vectors...
CVE-2008-0741: Undefined Security Weakness
Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server WAS before 6.0.2 Fix Pack 25 6.0.2.25 has unknown impact and attack vectors...
CVE-2008-0740: Undefined Security Weakness
IBM WebSphere Application Server WAS before 6.0.2 Fix Pack 25 6.0.2.25 and 6.1 before Fix Pack 15 6.1.0.15 writes unspecified cleartext information to httpplugin.log, which might allow local users to obtain sensitive information by reading this file...
CVE-2008-0741
CVE-2008-0741 concerns IBM WebSphere Application Server (WAS) 6.0.x prior to Fix Pack 25 (6.0.2.25). It is a vulnerability in the PropFilePasswordEncoder utility with unknown impact and attack vectors as described in the provided sources. The exact affected component/conditions are not elaborated...
CVE-2008-0741
Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server WAS before 6.0.2 Fix Pack 25 6.0.2.25 has unknown impact and attack vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Caching Proxy CP 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response...
CVE-2008-0717
Cross-site scripting XSS vulnerability in Caching Proxy CP 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response...
CVE-2008-0717
CVE-2008-0717 affects IBM WebSphere Edge Server’s Caching Proxy (CP) 5.1–6.1. When CGI mapping rules are enabled, it enables cross-site scripting by injecting arbitrary script/HTML that is reflected in an error response. The NVD entry lists a NETWORK attack vector with MEDIUM complexity, requirin...
CVE-2008-0717
Cross-site scripting XSS vulnerability in Caching Proxy CP 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response...
CVE-2008-0717: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Caching Proxy CP 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response...
CVE-2008-0402
Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members o...
Out-of-bounds
Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members o...
Design/Logic Flaw
Unspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere Application Server WAS 6.0 through 6.0.2.25, 6.1 through 6.1.0.14, and 5.1.1.x before 5.1.1.18 has unknown impact and attack vectors...
CVE-2008-0389
Unspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere Application Server WAS 6.0 through 6.0.2.25, 6.1 through 6.1.0.14, and 5.1.1.x before 5.1.1.18 has unknown impact and attack vectors...
CVE-2008-0389
Unspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere Application Server WAS 6.0 through 6.0.2.25, 6.1 through 6.1.0.14, and 5.1.1.x before 5.1.1.18 has unknown impact and attack vectors...
CVE-2008-0389
CVE-2008-0389 affects IBM WebSphere Application Server (WAS) versions 6.0–6.0.2.25, 6.1–6.1.0.14, and 5.1.1.x before 5.1.1.18, specifically the serveServletsByClassnameEnabled feature. The initial sources provide an unspecified vulnerability with unknown impact and attack vectors; no concrete exp...
CVE-2008-0402: Undefined Security Weakness
Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows remote authenticated users to bypass intended access restrictions and delete unspecified repository resources via unknown vectors, even when they are not administrators or members o...