CVE-2014-6186

CVE-2014-6186 affects IBM WebSphere Service Registry and Repository (WSRR) across multiple release streams (6.3 before 6.3.0.5; 7.0.x up to 7.0.0.5; 7.5.x before 7.5.0.3; 8.0.x before 8.0.0.1). Root cause per IBM entries: objects not accessible due to access-control restrictions can still appear ...

CVE-2014-6180

CVE-2014-6180 affects IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1. The Web UI is vulnerable to cross-site scripting via the HTTP User-Agent header, allowing remote authenticated users to inject arbitrary scripts/HTML. The related IBM bulletin...

CVE-2014-6188

CVE-2014-6188 refers to multiple XSS vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) affecting 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2. The issues allow remote authenticated users to inject arbitrary web script or HTML vi...

CVE-2014-6181

Summary : IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 is affected. The root cause is missing access-control checks for contained objects, allowing remote authenticated users to obtain sensitive information via unspecified vectors. Impact : information disclosure with...

CVE-2014-6187

CVE-2014-6187 is a CSRF vulnerability affecting IBM WebSphere Service Registry and Repository (WSRR) across multiple versions (6.3.x up to 6.3.0.5; 7.0.x up to 7.0.0.5; 7.5.x up to 7.5.0.3; 8.0.x up to 8.0.0.2). The issue allows remote authenticated users to hijack the victim’s authenticated sess...

CVE-2014-6178

CVE-2014-6178 affects IBM WebSphere Service Registry and Repository (WSRR) versions 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3. It is a cross-site scripting (XSS) vulnerability in the WSRR widgets that allows remote authenticated users to inject arbitrary web script or HTML via unspecified vec...

CVE-2014-6186: Undefined Security Weakness

IBM WebSphere Service Registry and Repository WSRR 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph...

CVE-2014-6178: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the widgets in IBM WebSphere Service Registry and Repository WSRR 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6155: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository WSRR 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allow remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2014-6179: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-7094

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3.x through 6.3.0.4 IBM WebSphere Service Registry and Repository WSRR versions 7.0.x through 7.0.0.4 IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0...

CVE-2014-6187: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in IBM WebSphere Service Registry and Repository WSRR 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknow...

CVE-2014-6181: Undefined Security Weakness

IBM WebSphere Service Registry and Repository WSRR 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2014-6177: Undefined Security Weakness

IBM WebSphere Service Registry and Repository WSRR 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform access-control checks for depth-0 retrieve operations, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2014-6132: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 6.3 through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via...

PT-2014-7086

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 7.0.0 through 7.0.0.4 IBM WebSphere Service Registry and Repository WSRR versions 7.5.0 through 7.5.0.2 Description The issue allows remote authenticated users to obtain sensitive...

CVE-2014-6188: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM WebSphere Service Registry and Repository WSRR 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6180: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the HTTP User-Agent header...

CVE-2014-3010

Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 6.2, 6.3 before 6.3.0.6, 7.0 before 7.0.0.6, 7.5 before 7.5.0.5, and 8.0 before 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-6721

CVE-2013-6721 is an XSS vulnerability in IBM WebSphere Service Registry and Repository (WSRR) affecting 7.5.x before 7.5.0.4 and 8.x up to 8.0.0.2. The issue allows remote authenticated users to inject arbitrary scripts/HTML via WSRR widgets. Public details indicate the root cause is insufficient...