PT-2014-1403

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.0.0 through 8.0.0.8 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote attackers to read arbitrary files via a crafted URL, potentially giving access ...

PT-2014-1405

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.32 IBM WebSphere Application Server versions 8.x through 8.0.0.8 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 WebSphere Virtual Enterprise versions 7.x through...

PT-2014-3929

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS Liberty Profile versions 8.5.x through 8.5.5.1 Description The issue allows remote attackers to obtain sensitive information via a crafted request. Recommendations For versions 8.5.x through 8.5.5.1, update...

PT-2014-1302

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 8.0.0 through 8.0.0.8 IBM WebSphere Application Server WAS versions 8.5.x through 8.5.5.1 Description The issue allows remote authenticated users to obtain sensitive information via crafted request...

CVE-2014-0857: Exposure of Sensitive Information to an Unauthorized Actor

The Administrative Console in IBM WebSphere Application Server WAS 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote authenticated users to obtain sensitive information via a crafted request...

CVE-2014-0896: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server WAS Liberty Profile 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information via a crafted request...

PT-2014-1406

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.30 IBM WebSphere Application Server versions 8.0.x through 8.0.0.7 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote authenticated...

PT-2014-1408

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.30 IBM WebSphere Application Server versions 8.0.x through 8.0.0.7 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote attackers to cau...

PT-2014-3091

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0.0 through 7.0.30 Description The issue allows remote authenticated users to obtain sensitive information via unspecified vectors when simpleFileServlet static file caching is enabled. Recommendatio...

CVE-2013-6725: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administrative Console in IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-6325: Improper Input Validation

IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote attackers to cause a denial of service resource consumption via a crafted request to a web services endpoint...

CVE-2013-6330: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server 7.x before 7.0.0.31, when simpleFileServlet static file caching is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2013-5418

Cross-site scripting XSS vulnerability in the Administrative console in IBM WebSphere Application Server WAS 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-5414

The migration functionality in IBM WebSphere Application Server WAS 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 does not properly support the distinction between the admin role and the adminsecmanager role, which allows remote authenticated users to gain privileges in...

PT-2013-4785

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS Liberty Profile versions prior to 8.5.5.1 Description The issue allows local users to obtain sensitive information via standard filesystem operations due to weak permissions for unspecified files...

PT-2013-5530

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 7.0.0.30 IBM WebSphere Application Server versions 8.0 through 8.0.0.7 IBM WebSphere Application Server versions 8.5 through 8.5.5.0 Description A cross-site scripting XSS issue exists in t...

PT-2013-5529

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 7.0.0.30 IBM WebSphere Application Server versions 8.0 through 8.0.0.7 IBM WebSphere Application Server versions 8.5 through 8.5.5.0 Description A cross-site scripting XSS issue allows remo...

CVE-2013-5418: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administrative console in IBM WebSphere Application Server WAS 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-5417: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM WebSphere Application Server WAS 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via HTTP response data...

CVE-2013-5414: Undefined Security Weakness

The migration functionality in IBM WebSphere Application Server WAS 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 does not properly support the distinction between the admin role and the adminsecmanager role, which allows remote authenticated users to gain privileges in...