PT-2012-2811

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 7.0 before 7.0.0.23 Description A cross-site scripting XSS issue exists in the Administration Console, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to...

PT-2012-2812

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 7.0 before 7.0.0.23 Description The issue allows remote attackers to bypass X.509 client-certificate authentication when a certain SSLv2 configuration with client authentication is used. Recommendations...

PT-2012-2814

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 7.0 before 7.0.0.23 Description A cross-site scripting XSS issue exists in the Integration Solution Console within the Administration Console, allowing remote attackers to inject arbitrary web script or...

CVE-2012-0716: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0717: Improper Authentication

IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication via unspecified vectors...

CVE-2012-2170: Undefined Security Weakness

The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request...

CVE-2012-0720: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2012-3853

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 7.0 through 7.0.0.22 Description The issue is related to the Application Snoop Servlet, which does not properly restrict access. This allows remote attackers to obtain sensitive client and request...

IBM WebSphere Application 7.0.0.23 Snoop Servlet信息泄露漏洞

Bugtraq ID: 53755 CVE ID：CVE-2012-2170 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。与其兼容的Web服务器包括：Apache HTTP Server，Netscape Enterprise Server，Microsoft Internet Information Services IIS以及IBM HTTP Server。 WAS 6.1、7.0、8.0在启用了默认Application Snoop...

Design/Logic Flaw

The Web Server Plug-in in IBM WebSphere Application Server WAS 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a...

CVE-2012-2162

The Web Server Plug-in in IBM WebSphere Application Server WAS 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a...

PT-2012-3846

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 8.0 and earlier Description The issue allows remote attackers to obtain sensitive information by sniffing the network or spoof arbitrary servers via a man-in-the-middle attack due to the use of...

CVE-2012-2162: Undefined Security Weakness

The Web Server Plug-in in IBM WebSphere Application Server WAS 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a...

IBM WebSphere Application Server Community Edition Tomcat Container拒绝服务漏洞

BUGTRAQ ID: 51345 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。与其兼容的Web服务器包括：Apache HTTP Server，Netscape Enterprise Server，Microsoft Internet Information Services IIS以及IBM HTTP Server。 IBM WebSphere Application Server Community...

PT-2012-1199

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 through 6.1.0.42 IBM WebSphere Application Server versions 7.0 through 7.0.0.20 IBM WebSphere Application Server versions 8.0 through 8.0.0.1 Description The issue is related to the...

IBM WebSphere Application Server for z/OS JAX-RPC远程安全漏洞

BUGTRAQ ID: 52250 CVE ID: CVE-2012-0199 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。与其兼容的Web服务器包括：Apache HTTP Server，Netscape Enterprise Server，Microsoft Internet Information Services IIS以及IBM HTTP Server。 IBM WebSphere Application Server for...

IBM WebSphere Application Server Hash Collisions DOS Vulnerability

The host is running IBM WebSphere Application Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmwashashcollisionsdosvuln.nasl 5940 2017-04-12 09:02:05Z teissa $ IBM WebSphere Application Server Hash Collisions DOS Vulnerability Authors: Antu Sanadi...

CVE-2012-0193

IBM WebSphere Application Server WAS 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service C...

CVE-2012-0193: Improper Input Validation

IBM WebSphere Application Server WAS 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service C...

PT-2012-2391

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 6.0 through 6.0.2.43 IBM WebSphere Application Server WAS versions 6.1 before 6.1.0.43 IBM WebSphere Application Server WAS versions 7.0 before 7.0.0.23 IBM WebSphere Application Server WAS version...