IBM WebSphere Application Server IVT Cross Site Scripting Vulnerability

The host is running IBM WebSphere Application Server and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasivtxssvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ IBM WebSphere Application Server IVT Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyrigh...

Cross site scripting

Cross-site scripting XSS vulnerability in the Installation Verification Test IVT application in the Install component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 and 7.0 before 7.0.0.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE:...

CVE-2011-1362

Cross-site scripting XSS vulnerability in the Installation Verification Test IVT application in the Install component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 and 7.0 before 7.0.0.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE:...

CVE-2011-1362

CVE-2011-1362 affects IBM WebSphere Application Server (WAS) IVT in the Install component. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors due to an incomplete fix for CVE-2011-1308. Affected products/versions: WAS 6.1 before 6.1.0.41 and W...

IBM WebSphere Application Server 6.1 < 6.1.0.37 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 37 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - It is possible to trigger a DoS condition via SAAJ API provided by the WebSphere Web services runtime. PM19534 - An unspecifie...

Cross site scripting

Cross-site scripting XSS vulnerability in the Installation Verification Test IVT application in the Install component in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1308

IBM WebSphere Application Server (WAS) versions affected by CVE-2011-1308 include the Installation Verification Test (IVT) in the Install component up to 7.0.0.15. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspec...

CVE-2011-1308

Cross-site scripting XSS vulnerability in the Installation Verification Test IVT application in the Install component in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2005-0978

Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. dot dot in a PUSH command...

CVE-2005-0978

Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. dot dot in a PUSH command...

CVE-2005-0978

The CVE-2005-0978 entry describes a directory traversal flaw in the IVT BlueSoleil 1.4 Object Push service, exploitable by sending a PUSH command containing .. to upload arbitrary files. Affected component: Object Push service of IVT BlueSoleil 1.4. Root cause: directory traversal in PUSH handlin...