Integer overflow

Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-4444

CVE-2010-4444 affects Oracle Sun Java System Access Manager and Oracle OpenSSO versions 7, 7.1, and 8. The connected documents describe an unspecified vulnerability that could impact confidentiality, integrity, and availability via unknown vectors, with a CVSSv2 base score of 6.8 (network access,...

CVE-2011-0494

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might...

Directory traversal

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might...

CVE-2011-0494

CVE-2011-0494 is a directory traversal vulnerability affecting IBM Tivoli Access Manager for e-Business WebSEAL. The issue exists in WebSEAL components across several releases: 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 b...

CVE-2010-4623

WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service worker thread consumption via shift-reload actions...

CVE-2010-4622

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e encoded dot dot in a URI...

Code injection

WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service worker thread consumption via shift-reload actions...

Directory traversal

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e encoded dot dot in a URI...

CVE-2010-4622

CVE-2010-4622 is a directory traversal vulnerability in IBM Tivoli Access Manager for e-Business WebSEAL 6.1.1 on AIX, exploitable via an encoded dot-dot in the URI (%uff0e%uff0e) to read arbitrary files. The entry notes a vulnerable version before 6.1.1-TIV-AWS-FP0001 and lists multiple public a...

CVE-2010-4623

CVE-2010-4623 affects IBM Tivoli Access Manager for e-Business WebSEAL: WebSEAL 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to trigger a denial of service by performing shift-reload actions, reducing availability. The issue is mitigated by applying the FP0001 patch (6.1.1-...

CVE-2010-4622

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e encoded dot dot in a URI...

CVE-2010-4623

WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service worker thread consumption via shift-reload actions...

IBM Tivoli Access Manager 6.1.1 for E-Business - Directory Traversal

source: https://www.securityfocus.com/bid/45582/info IBM Tivoli Access Manager for e-business is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the contex...

IBM Tivoli Access Manager 6.1.1 for E-Business - Directory Traversal

IBM Tivoli Access Manager 6.1.1 for E-Business - Directory Traversal source: https://www.securityfocus.com/bid/45582/info IBM Tivoli Access Manager for e-business is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue...

CVE-2010-4120

Multiple cross-site scripting XSS vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via 1 the parm1 parameter to ivt/ivtserver, or the method parameter to 2 acl, 3 domain, ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via 1 the parm1 parameter to ivt/ivtserver, or the method parameter to 2 acl, 3 domain, ...

CVE-2010-4120

CVE-2010-4120 describes multiple cross-site scripting (XSS) vulnerabilities in the IBM Tivoli Access Manager for e-business (TAM) console. The issue affects TAM 6.1.0 before 6.1.0-TIV-TAM-FP0006 and allows remote attackers to inject arbitrary web script or HTML via the parm1 parameter to ivt/ivts...

CVE-2010-4120

Multiple cross-site scripting XSS vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via 1 the parm1 parameter to ivt/ivtserver, or the method parameter to 2 acl, 3 domain, ...

IBM Tivoli Access Manager for E-Business - ibmwpmrule?method Cross-Site Scripting

IBM Tivoli Access Manager for E-Business - ibmwpmrule?method Cross-Site Scripting source: https://www.securityfocus.com/bid/44382/info IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...