IBM Tivoli Provisioning Manager Express Asset.getMimeType SQL Injection (CVE-2012-0199)

An SQL injection vulnerability has been reported in IBM Tivoli Provisioning Manager Express...

CVE-2012-0199

CVE-2012-0199 affects IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1, with multiple SQL injection paths in the web interface (notably SoapServlet’s Printer.getPrinterAgentKey, register.do’s User.updateUserValue, logon.do’s User.isExistingUser, CallHomeExec’s Asset.getHWKe...

IBM WebSphere Application Server for z/OS JAX-RPC远程安全漏洞

BUGTRAQ ID: 52250 CVE ID: CVE-2012-0199 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。与其兼容的Web服务器包括：Apache HTTP Server，Netscape Enterprise Server，Microsoft Internet Information Services IIS以及IBM HTTP Server。 IBM WebSphere Application Server for...