IBM WebSphere Application Server管理脚本工具未明漏洞

IBM WebSphere Application Server是一款企业级应用服务程序。 IBM WebSphere Application Server多个管理脚本存在输入验证问题，远程攻击者可以利用漏洞获得敏感信息或进行其他各种攻击。 目前没有详细漏洞细节提供。 IBM Websphere Application Server 6.0.2 .9 IBM Websphere Application Server 6.0.2 .7 IBM Websphere Application Server 6.0.2 .5 IBM Websphere Application Server 6.0...

CVE-2007-5483

Unspecified vulnerability in the Administrative Scripting Tools such as wsadmin or ANT in IBM WebSphere Application Server 5.x and 6.0.x has unknown impact and attack vectors...

Security feature bypass

Unspecified vulnerability in the Administrative Scripting Tools such as wsadmin or ANT in IBM WebSphere Application Server 5.x and 6.0.x has unknown impact and attack vectors...

CVE-2007-5483

IBM WebSphere Application Server 6.0.x prior to Fix Pack 23 is affected by an unspecified vulnerability in the Administrative Scripting Tools (wsadmin/ANT). The NASL entry explicitly identifies this version range and tool, but provides no technical details on root cause, impact, or exploit vector...

CVE-2007-5483: Undefined Security Weakness

Unspecified vulnerability in the Administrative Scripting Tools such as wsadmin or ANT in IBM WebSphere Application Server 5.x and 6.0.x has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK44789...

Code injection

Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK33803...

CVE-2007-4833

Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK44789...

CVE-2007-4833

Technical details about CVE-2007-4833 are not publicly available in the provided documents; no affected products, vulnerable component specifics, or remediation information are disclosed here. Monitor for updates.

IBM WebSphere Application Server未明漏洞

IBM WebSphere Application Server是一款商业性质的WEB应用服务程序。 IBM WebSphere Application Server包含的Edge组件存在未明错误，远程攻击者可以利用漏洞获得敏感信息或者进行拒绝服务攻击。 目前没有详细漏洞细节提供。 IBM WebSphere Application Server 6.1.x 升级程序： http://www-1.ibm.com/support/docview.wss?uid=swg24016159...

CVE-2007-4833: Undefined Security Weakness

Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK44789...

CVE-2007-4839: Undefined Security Weakness

Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK33803...

Code injection

Multiple unspecified vulnerabilities in IBM WebSphere Application Server WAS before Fix Pack 21 6.0.2.21 have unknown impact and attack vectors, aka 1 PK33799, or 2 a "Potential security exposure" in the Samples component PK40213...

CVE-2007-3960

Multiple unspecified vulnerabilities in IBM WebSphere Application Server WAS before Fix Pack 21 6.0.2.21 have unknown impact and attack vectors, aka 1 PK33799, or 2 a "Potential security exposure" in the Samples component PK40213...

CVE-2007-3960

CVE-2007-3960 affects IBM WebSphere Application Server 6.0.x before Fix Pack 21 (6.0.2.21). Connected sources indicate multiple vulnerabilities, including at least one where the web container may emit response data intended for a different request after a closed connection error (PK41446) and oth...

CVE-2007-3960: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM WebSphere Application Server WAS before Fix Pack 21 6.0.2.21 have unknown impact and attack vectors, aka 1 PK33799, or 2 a "Potential security exposure" in the Samples component PK40213...

CVE-2007-3397

The web container in IBM WebSphere Application Server WAS before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information...

CVE-2007-3397: Undefined Security Weakness

The web container in IBM WebSphere Application Server WAS before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information...

Authorization

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."...

Cross site scripting

Cross-site scripting XSS vulnerability in the Samples component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...