CVE-2011-0388: Undefined Security Weakness

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a denial of service...

DSA-2160-1 tomcat6 - several

Bulletin has no description...

Important: Red Hat Security Advisory: jbossweb security update

A patch for JBoss Enterprise Application Platform 4.2.0.CP09, 4.3.0.CP09, and 5.1 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CV...

Important: Red Hat Security Advisory: jbossweb security update

Updated jbossweb packages that fix one security issue are now available for JBoss Enterprise Web Platform 5 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score,...

Authentication flaw

HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class...

CVE-2011-0276

HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class...

HP OpenView Performance Insight Server Backdoor Account Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Performance Insight Server. Authentication is not required to exploit this vulnerability. The specific vulnerability is due to a hidden account present within the...

CVE-2010-4437

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container...

CVE-2010-4453

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container...

CVE-2010-4437

CVE-2010-4437 affects Oracle WebLogic Server (Oracle Fusion Middleware) versions 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, 10.3.3. The connected advisories describe a vulnerability in the Servlet Container handling that enables a session fixation scenario via HTTP POST requests. An attacker entices a user...

CVE-2010-4437

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container...

CVE-2010-4453

CVE-2010-4453 affects Oracle WebLogic Server as part of Oracle Fusion Middleware (versions 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, 10.3.3). The vulnerability is described as unspecified remote impact to integrity via unknown vectors related to the Servlet Container. The available documenta...

PT-2011-1541

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, 10.3.3 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to the Servlet Container. Recommendations...

CVE-2010-4437: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container...

PT-2011-1557

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Servlet Container i...

CVE-2010-4453: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container...

PT-2011-1521

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 2.0.1.0 through 2.0.1.3 Description The issue affects confidentiality, integrity, and availability. It is related to the handling of null bytes in the evaluation parameter used in a filename, potentially...

CVE-2011-0315

Cross-site scripting XSS vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to the lack of an error page for an...