PT-2013-4665

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.5.0 through 11.1.1.6.0 Description The issue affects confidentiality and is related to the Test Page in the Oracle Web Services component. Details about the exploitation vectors are not specified. There...

PT-2013-4677

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to Web Services in the Siebel Core - EAI component. Recommendations For Oracle...

PT-2013-4676

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Web Services in the Siebel Core - EAI component. Recommendations For...

PT-2013-5775

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM version 8.1.1 Description The issue affects the availability of the system, allowing remote authenticated users to exploit it via unknown vectors related to Web Services in the Siebel Core - EAI component. Recommendations For...

PT-2013-4820

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.47 IBM WebSphere Application Server versions 7.0 before 7.0.0.31 IBM WebSphere Application Server versions 8.0 before 8.0.0.8 IBM WebSphere Application Server versions 8.5 before 8.5.5...

CVE-2013-2934

Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 does not properly restrict access to web services, which has unspecified impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

CVE-2013-2934

Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 does not properly restrict access to web services, which has unspecified impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

CVE-2013-2934

Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 is affected. The issue is that web services access is not properly restricted, with unspecified impact and attack vectors. Root cause details are not provided beyond this restriction gap. No exploitation or specific ...

PT-2013-4050

Name of the Vulnerable Software and Affected Versions Citrix CloudPortal Services Manager aka Cortex versions prior to 10.0 Cumulative Update 3 Description The issue is related to improper restriction of access to web services, which may have an unspecified impact. The attack vectors for this iss...

Fedora Update for wss4j FEDORA-2013-14106

Check for the Version of wss4j OpenVAS Vulnerability Test Fedora Update for wss4j FEDORA-2013-14106 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for wss4j FEDORA-2013-14159

Check for the Version of wss4j OpenVAS Vulnerability Test Fedora Update for wss4j FEDORA-2013-14159 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

[SECURITY] Fedora 19 Update: wss4j-1.6.10-1.fc19

The Apache WSS4J project provides a Java implementation of the primary security standards for Web Services...

[SECURITY] Fedora 18 Update: wss4j-1.6.10-1.fc18

The Apache WSS4J project provides a Java implementation of the primary security standards for Web Services...

SA-CONTRIB-2013-062 - RESTful Web Services (RESTWS) - Access Bypass

This module enables you to expose Drupal entities as RESTful web services. It provides a machine-readable interface to exchange resources in JSON, XML and RDF. The module doesn't sufficiently check for field level access when preforming entity write operations on POST and PUT requests. It also do...

Authentication flaw

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.7 does not properly perform authentication for unspecified web services, which allows remote attackers to issue requests in the context of an arbitrary user's active session via unknown vectors...

CVE-2013-2993

IBM WebSphere Commerce 6.x up to 6.0.0.11 and 7.x up to 7.0.0.7 contains an authentication flaw in unspecified web services. The issue allows remote attackers to issue requests in the context of an arbitrary user’s active session via unknown vectors. Affected component is the authentication handl...

PT-2013-4085

Name of the Vulnerable Software and Affected Versions IBM WebSphere Commerce versions 6.x through 6.0.0.11 IBM WebSphere Commerce versions 7.x through 7.0.0.7 Description The issue is related to improper authentication for web services, allowing remote attackers to issue requests in the context o...

Sybase EAServer 6.3.1 - Multiple Vulnerabilities

Sybase EAServer fully supports all the Web services standards and enables enterprises to rapidly expose business functions as Web services. EAServer also provides a graphical interface to automate the publication and management of your company’s Web services. Today, EAServer supports EJB and...

Sybase EAServer 6.3.1 Directory Traversal / XXE Injection / Command Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Sybase EAServer vulnerable version: =6.3.1 fixed version: vendor did not supply version information CVE number: - impact: critical...

SEC Consult SA-20130719-0 :: Multiple vulnerabilities in Sybase EAServer

SEC Consult Vulnerability Lab Security Advisory 20130719-0 ======================================================================= title: Multiple vulnerabilities product: Sybase EAServer vulnerable version: =6.3.1 fixed version: vendor did not supply version information CVE number: - impact:...