CVE-2014-6180: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the HTTP User-Agent header...

CVE-2014-6188: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM WebSphere Service Registry and Repository WSRR 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6178: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the widgets in IBM WebSphere Service Registry and Repository WSRR 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6155: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository WSRR 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allow remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2014-6179: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-7072

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3.x through 6.3.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.0.x through 7.0.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0...

PT-2014-7087

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0.3 IBM WebSphere Service Registry and Repository WSRR versions 8.0.x through 8.0.0.2 Description A cross-site scripting XSS issue exists in the widgets of IBM...

PT-2014-7093

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3.x before 6.3.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.0.x through 7.0.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.5.x before 7.5.0.3...

PT-2014-7094

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3.x through 6.3.0.4 IBM WebSphere Service Registry and Repository WSRR versions 7.0.x through 7.0.0.4 IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0...

CVE-2014-6153: Undefined Security Weakness

The Web UI in IBM WebSphere Service Registry and Repository WSRR 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture...

PT-2014-7073

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0.4 IBM WebSphere Service Registry and Repository WSRR versions 8.0.x before 8.0.0.3 IBM WebSphere Service Registry and Repository WSRR versions 8.5.x before 8.5.0.1...

PT-2014-7095

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3.x before 6.3.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.0.x through 7.0.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.5.x before 7.5.0.3...

CVE-2014-6187: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in IBM WebSphere Service Registry and Repository WSRR 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknow...

CVE-2014-6181: Undefined Security Weakness

IBM WebSphere Service Registry and Repository WSRR 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2014-6177: Undefined Security Weakness

IBM WebSphere Service Registry and Repository WSRR 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform access-control checks for depth-0 retrieve operations, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

PT-2014-7090

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 7.0.0 through 7.0.0.4 Description The issue allows remote authenticated users to obtain sensitive information due to a lack of access-control checks for contained objects...

CVE-2014-6132: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 6.3 through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via...

PT-2014-7059

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3 through 6.3.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.0.x through 7.0.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0.4...

PT-2014-7088

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0.3 IBM WebSphere Service Registry and Repository WSRR versions 8.0.x through 8.0.0.1 Description A cross-site scripting XSS issue exists in the Web UI, allowing...

PT-2014-7089

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 7.0.0 through 7.0.0.4 IBM WebSphere Service Registry and Repository WSRR versions 7.5.0 through 7.5.0.0 Description A cross-site scripting XSS issue exists in the Web UI, allowing...