Lucene search
K

13287 matches found

CNNVD
CNNVD
added 2024/10/16 12:0 a.m.1 views

IBM WebSphere Application Server 代码问题漏洞

IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An XML external entity injection vulnerability exists in...

5.5CVSS6.8AI score0.00439EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.2 views

IBM WebSphere Application Server 跨站脚本漏洞

IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A cross-site scripting vulnerability exists in IBM...

5.5CVSS6.1AI score0.00237EPSS
Exploits0References3
OSV
OSV
added 2024/10/15 10:15 p.m.0 views

CVE-2024-45085

IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an unexpected specially crafted request. A remote attacker could exploit this vulnerability to cause an error resulting in a denial of service...

7.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/10/15 10:15 p.m.14 views

CVE-2024-45085

IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an unexpected specially crafted request. A remote attacker could exploit this vulnerability to cause an error resulting in a denial of service...

7.5CVSS0.00568EPSS
Exploits0References1
CVE
CVE
added 2024/10/15 9:12 p.m.52 views

CVE-2024-45085

CVE-2024-45085 affects IBM WebSphere Application Server 8.5. Root cause: improper check for unusual or exceptional conditions (CWE-754). Description documents a denial of service via an unexpected specially crafted request that can cause an error and halt service under specific configurations. IB...

7.5CVSS5.8AI score0.00568EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/15 9:12 p.m.11 views

CVE-2024-45085 IBM WebSphere Application Server denial of service

IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an unexpected specially crafted request. A remote attacker could exploit this vulnerability to cause an error resulting in a denial of service...

5.9CVSS0.00568EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/15 9:12 p.m.10 views

CVE-2024-45085 IBM WebSphere Application Server denial of service

IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an unexpected specially crafted request. A remote attacker could exploit this vulnerability to cause an error resulting in a denial of service...

5.9CVSS7AI score0.00568EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/15 12:0 a.m.3 views

IBM WebSphere Application Server 代码问题漏洞

IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A code issue vulnerability exists in IBM WebSphere...

7.5CVSS6.7AI score0.00568EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/14 4:13 a.m.34 views

Security Bulletin: Multiple security vulnerabilities in IBM MQ affect IBM Robotic Process Automation.

Summary Multiple security vulnerabilities in IBM MQ affect IBM Robotic Process Automation. This bulletin identifies the security fixes to apply to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-25026 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere...

7.5CVSS10AI score0.01433EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/04 9:46 a.m.34 views

Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities

Summary Multiple security vulnerabilities have been addressed in an update for IBM Security Verify Governance. Vulnerability Details CVEID:CVE-2024-30172 DESCRIPTION: The Bouncy Castle Crypto Package For Java is vulnerable to a denial of service, caused by an infinite loop in the Ed25519...

8.1CVSS8AI score0.01197EPSS
Exploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/10/02 12:0 a.m.28 views

IBM WebSphere Application Server 8.5.x < 8.5.5.27 / 9.x < 9.0.5.22 XSS (7171755)

The version of IBM WebSphere Application Server running on the remote host is affected by a XSS vulnerability as referenced in the 7171755 advisory. - IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed...

4.8CVSS7AI score0.00238EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/01 6:52 p.m.43 views

Security Bulletin: IBM WebSphere Application Server is vulnerable to stored cross-site scripting (CVE-2024-45073)

Summary IBM WebSphere Application Server is vulnerable to stored cross-site scripting in the administrative console. Vulnerability Details CVEID:CVE-2024-45073 DESCRIPTION: IBM WebSphere Application Server is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user t...

4.8CVSS4.9AI score0.00238EPSS
Exploits0Affected Software1
NVD
NVD
added 2024/09/30 10:15 p.m.13 views

CVE-2024-45073

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

4.8CVSS0.00238EPSS
Exploits0References1
OSV
OSV
added 2024/09/30 10:15 p.m.1 views

CVE-2024-45073

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

4.8CVSS5.2AI score0.00238EPSS
Exploits0References1
CVE
CVE
added 2024/09/30 10:0 p.m.72 views

CVE-2024-45073

CVE-2024-45073 affects IBM WebSphere Application Server 8.5 and 9.0 with a stored cross-site scripting vulnerability that enables a privileged user to inject JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. The issue is documented across IBM and ...

4.8CVSS4.7AI score0.00238EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/09/30 10:0 p.m.14 views

CVE-2024-45073 IBM WebSphere Application Server cross-site scripting

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

4.8CVSS0.00238EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/30 10:0 p.m.16 views

CVE-2024-45073 IBM WebSphere Application Server cross-site scripting

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

4.8CVSS6.2AI score0.00238EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/09/30 6:15 a.m.23 views

Security Bulletin: Mulitple Vulnerabilities in Java and IBM WebSphere Application Server Liberty affects IBM Cloud Application Business Insights.

Summary Multiple Vulnerabilities in Java and IBM WebSphere Application Server Liberty affects IBM Cloud Application Business Insights ICABI have ben addressed in Fixpacks 1.1.7.10 and 1.1.8.5 Vulnerability Details CVEID:CVE-2024-22354 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM...

7.5CVSS7.5AI score0.01257EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2024/09/30 12:0 a.m.1 views

IBM WebSphere Application Server 安全漏洞

IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A cross-site scripting vulnerability exists in IBM...

4.8CVSS6AI score0.00238EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/09/30 12:0 a.m.1 views

PT-2024-31417 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 8.5 through 9.0 Description: This issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure...

5.5CVSS6.3AI score0.00238EPSS
Exploits0References10
Rows per page
Query Builder