10164 matches found
IBM WebSphere Application Server 6.1 < 6.1.0.7 Multiple Vulnerabilities
IBM WebSphere Application Server 6.1 before Fix Pack 7 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - An unspecified denial of service vulnerability in the Java Message Service JMS. - An unspecified vulnerability in the Servlet...
IBM WebSphere Application Server 6.0 < 6.0.2.19 HTTP Response Splitting
IBM WebSphere Application Server 6.0.x before Fix Pack 19 appears to be running on the remote host. Such versions are reportedly affected by an HTTP response splitting vulnerability because the application fails to properly sanitize user-supplied data to an unspecified parameter and script. C...
IBM WebSphere Application Server 6.0 < 6.0.2.21 Multiple Vulnerabilities
IBM WebSphere Application Server 6.0.x before Fix Pack 21 appears to be running on the remote host. Such versions are reportedly affected by multiple vulnerabilities. - The web container sends response data intended for a different request in certain circumstances after a closed connection error...
IBM WebSphere Application Server 6.0 < 6.0.2.25 Multiple Vulnerabilities
IBM WebSphere Application Server 6.0.x before Fix Pack 25 appears to be running on the remote host. Such versions are reportedly affected by multiple vulnerabilities. - An unspecified vulnerability in the Administrative Console involving monitor role users. PK45768 - WebSphere Application Server...
IBM WebSphere应用服务器wsadmin脚本执行信息泄露漏洞
CVE ID: CVE-2010-0769 IBM Websphere应用服务器以Java和Servlet引擎为基础，支持多种HTTP服务，可帮助用户完成从开发、发布到维护交互式的动态网站的所有工作。 WebSphere应用服务器没有正确地定义wsadmin脚本化J2CConnectionFactory对象，本地用户可以通过从 resources.xml文件中读取明文字段获得KeyRingPassword口令。 IBM Websphere Application Server 7.0.x IBM Websphere Application Server 6.1.x IBM Websphe...
Default credentials
IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file...
CVE-2010-0769
IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file...
CVE-2010-0770
IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service ORB ListenerThread hang by aborting an SSL handshake...
Design/Logic Flaw
IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service ORB ListenerThread hang by aborting an SSL handshake...
CVE-2010-0768
CVE-2010-0768 is an XSS flaw in IBM WebSphere Application Server Administration Console. Affected products are WAS 6.0 before 6.0.2.41, WAS 6.1 before 6.1.0.31, and WAS 7.0 before 7.0.0.9, where arbitrary web script or HTML could be injected via the URI. Public sources in connected documents corr...
CVE-2010-0769
IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 do not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to read a KeyRingPassword password from a cleartext field in resources.xml. This is a local infor...
CVE-2010-0770
IBM WebSphere Application Server (WAS) is affected by CVE-2010-0770. A remote authenticated user can cause a denial-of-service by aborting an SSL handshake, leading to an ORB ListenerThread hang. Affected versions are WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9. Remediati...
CVE-2010-0770
IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service ORB ListenerThread hang by aborting an SSL handshake...
IBM WebSphere Application Server multiple vulnerabilities
IBM WebSphere Application Server WAS is prone to multiple vulnerabilities. 1. A cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...
IBM WebSphere Application Server Multiple Vulnerabilities (swg27004980)
IBM WebSphere Application Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
IBM WebSphere Application Server (Traditional and Liberty) Detection (HTTP)
HTTP based detection of an IBM WebSphere Application Server Traditional and Liberty. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Oracle Application Server 9i Webcache File Corruption (CVE-2005-1382)
Oracle Application Server Web Cache is a Web portal acceleration software provided by Oracle. It can cache both static and dynamic content and improve scalability and availability of Oracle applications accessed through HTTP. There exists a vulnerability in the way the Oracle Application Server...
CVE-2010-1182
Multiple unspecified vulnerabilities in the administrative console in IBM WebSphere Application Server WAS 7.0.x before 7.0.0.9 on z/OS have unknown impact and attack vectors...
CVE-2010-1182
Technical details about CVE-2010-1182 are not provided in the supplied documents; they mention the vulnerability generically for IBM WebSphere Application Server 7.0.x on z/OS and reference a fix in 7.0.0.9, but no specifics.