CVE-2006-6135

Multiple unspecified vulnerabilities in IBM WebSphere Application Server 6.1.0 before Fix Pack 3 6.1.0.3 have unknown impact and attack vectors, related to 1 a "Potential security vulnerability" PK29725 and 2 "Potential security exposure" PK30831...

CVE-2006-6136: Undefined Security Weakness

IBM WebSphere Application Server 6.1.0 before Fix Pack 3 6.1.0.3 does not perform EAL4 authentication checks at the proper time during "registering of response operation," which has unknown impact and attack vectors...

CVE-2006-6135: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM WebSphere Application Server 6.1.0 before Fix Pack 3 6.1.0.3 have unknown impact and attack vectors, related to 1 a "Potential security vulnerability" PK29725 and 2 "Potential security exposure" PK30831...

IBM WebSphere Application Server '%20' Request Source Disclosure

It is possible to make the remote web server disclose the source code of its JSP pages by requesting the .jsp file with a '%20' appended to the request. An attacker may use this flaw to get the source code of your CGIs and possibly to obtain passwords and other relevant information about this hos...

IBM Websphere 6.0 - 'Faultactor' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21018/info IBM WebSphere is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...

IBM Websphere 6.0 - Faultactor Cross-Site Scripting

IBM Websphere 6.0 - Faultactor Cross-Site Scripting source: https://www.securityfocus.com/bid/21018/info IBM WebSphere is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

Cross Site Scripting (XSS) Vulnerability in IBM WebSphere Application Server

Title: Cross Site Scripting XSS Vulnerability in IBM WebSphere Application Server ProCheckUp Security Bulletin Description: IBM WebSphere Application Server is vulnerable to Cross Site Scripting through a 'faultfactor' tag in the 500 Internal Server Error page on port 8880 default SOAP port. Date...

IBMWAS-XSS.txt

Title: Cross Site Scripting XSS Vulnerability in IBM WebSphere Application Server ProCheckUp Security Bulletin Description: IBM WebSphere Application Server is vulnerable to Cross Site Scripting through a 'faultfactor' tag in the 500 Internal Server Error page on port 8880 default SOAP port. Date...

CVE-2006-5323

Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a "possible security exposure," aka PK29360...

CVE-2006-5324

The Web Services Notification WSN security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374...

CVE-2006-5324

The Web Services Notification WSN security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374...

CVE-2006-5323

Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a "possible security exposure," aka PK29360...

CVE-2006-5324: Undefined Security Weakness

The Web Services Notification WSN security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374...

CVE-2006-5323: Undefined Security Weakness

Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a "possible security exposure," aka PK29360...

CVE-2006-4223

CVE-2006-4223 affects IBM WebSphere Application Server (WAS) before version 6.0.2.13. The issue involves JSP source code exposure via context-dependent paths when ibm-web-ext.xmi sets fileServingEnabled to true or when ExtendedDocumentRoot places a JSP outside a WAR file. This allows an attacker ...

CVE-2006-4222

Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including 1 an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by 2 PK22747, 3 PK24334, 4...

CVE-2006-4223

IBM WebSphere Application Server WAS before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" PK23475, which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place...

CVE-2006-4222: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including 1 an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by 2 PK22747, 3 PK24334, 4...

CVE-2006-4223: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server WAS before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" PK23475, which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place...

CVE-2006-4136

Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving 1 "SOAP requests and responses", 2 mbean, 3 ThreadIdentitySupport, and possibly others...