IBM WebSphere Application Server 8.0 < Fix Pack 3 Multiple Vulnerabilities

IBM WebSphere Application Server 8.0 before Fix Pack 3 appears to be running on the remote host and is potentially affected by the following vulnerabilities : - Unspecified cross-site scripting issues exist related to the administrative console. PM52274, PM53132 - An issue related to the weak...

IBM Lotus Symphony < 3.0 Fix Pack 3 Multiple Vulnerabilities

The version of IBM Lotus Symphony was found to be less than 3.0 Fix Pack 3. Such versions are affected by multiple vulnerabilities: - Multiple unspecified vulnerabilities. CVE-2011-2884 - Opening a .doc document with a user defined toolbar can cause an application crash. CVE-2011-2885 - Opening a...

IBM WebSphere Application Server 8.0 < Fix Pack 2 Multiple Vulnerabilities

IBM WebSphere Application Server 8.0 before Fix Pack 2 appears to be running on the remote host and is potentially affected by the following vulnerabilities : - An unspecified cross-site scripting issue exists related to the 'Web 2.0 Messaging service'. PM37840 - A security exposure when using...

IBM WebSphere Application Server 7.0 < Fix Pack 21 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 21 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An unspecified cross-site scripting issue exists related to the 'Web 2.0 Messaging service'. PM37840 - A security exposure whe...

IBM DB2 9.5 < 9.5 Fix Pack 9 Multiple Vulnerabilities

Binary data 6347.prm...

DB2 9.5 < Fix Pack 9 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior to Fix Pack 9. It is, therefore, affected by the following vulnerabilities : - Incorrect, world-writable file permissions are in place for the file 'NODES.REG'. IC79518 - An unspecified error can allow...

IBM DB2 9.7 < Fix Pack 5 Multiple Denial of Service Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple denial of service vulnerabilities : - On Unix and Unix-like systems with both the Self Tuning Memory Manager STMM feature enabled and the...

IBM WebSphere Application Server JSF应用请求处理信息泄露漏洞

CVE ID：CVE-2011-1368 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 WebSphere Application Server允许远程攻击者获得敏感信息，问题是由于不正确处理JSF应用请求，远程攻击者可未授权查看主机系统上的文件。 IBM WebSphere Application Server 8.0.x 厂商解决方案 IBM WebSphere Application Server 8.0.0 Fix Pack 1...

IBM DB2 9.7 < 9.7 Fix Pack 5 Local DoS

Binary data 6099.prm...

IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability

The host is running IBM WebSphere Application Server and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasadminconsolexssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability Authors:...

IBM WebSphere Application Server 7.0 < Fix Pack 19 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 19 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An open redirect vulnerability exists related to the 'logoutExitPage' parameter. This can allow remote attackers to trick user...

IBM WebSphere Application Server 7.0 < Fix Pack 17 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 17 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - Use of an insecure XML encryption algorithm could allow for decryption of JAX-RPC or JAX-WS Web Services requests. PM34841 - A...

IBM DB2 9.7 < Fix Pack 4 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 4. It is, therefore, affected by one or more of the following issues : - An unspecified error in the Relational Data Services component can be exploited to update statistics for tables withou...

IBM DB2 9.7 < 9.7 Fix Pack 4 Multiple Vulnerabilities

Binary data 5896.prm...

SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability

SAP Crystal Reports is prone to heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM WebSphere Application Server 7.0 < Fix Pack 15 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 15 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - A double free error in BBOOORBR control block could trigger a denial of service condition. PM17170 - A cross-site scripting...

IBM DB2 9.7 < 9.7 Fix Pack 3 Multiple Vulnerabilities

Binary data 5751.prm...

IBM DB2 9.5 < 9.5 Fix Pack 7 Multiple Vulnerabilities

Binary data 5750.prm...

IBM DB2 9.5 < Fix Pack 7 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior Fix Pack 7. It is, therefore, affected by the following vulnerabilities : - The 'db2dasrrm' component included with such versions fails to perform sufficient bounds checks on user- supplied input, which ...

IBM DB2 9.1 < Fix Pack 10 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.1 running on the remote host is prior to Fix Pack 10. It is, therefore, affected by one or more of the following issues : - It is possible to execute non-DDL statements even after an user's DBADM authority has been revoked. IC66811 - Multipl...