PT-2015-5556

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale versions 7.1.0 through 7.1.0.2 IBM WebSphere eXtreme Scale versions 7.1.1 through 7.1.1.0 Description The issue is related to an improper account-lockout setting, making it easier for remote attackers to obtain acce...

PT-2015-5557

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale versions 7.1.0 through 7.1.0.2 IBM WebSphere eXtreme Scale versions 7.1.1 through 7.1.1.0 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a...

PT-2015-5551

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale versions 7.1.0 through 7.1.0.2 IBM WebSphere eXtreme Scale versions 7.1.1 through 7.1.1.0 Description The issue makes it easier for remote attackers to capture the session cookie by intercepting its transmission...

CVE-2015-2025: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2015-2028: Undefined Security Weakness

CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL...

CVE-2015-2031: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-2029: Undefined Security Weakness

Session fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to hijack web sessions via a session identifier...

CVE-2015-2026: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...

PT-2015-5555

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale versions 7.1.0 through 7.1.0.2 IBM WebSphere eXtreme Scale versions 7.1.1 through 7.1.1.0 Description A session fixation issue allows remote attackers to hijack web sessions via a session identifier. Recommendations...

CVE-2015-2030: Undefined Security Weakness

IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 has an improper account-lockout setting, which makes it easier for remote attackers to obtain access via a brute-force attack...

PT-2015-5552

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale versions 7.1.0 through 7.1.0.2 IBM WebSphere eXtreme Scale versions 7.1.1 through 7.1.1.0 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of arbitra...

CVE-2015-2027: Undefined Security Weakness

IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 improperly performs logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation...

PT-2015-5554

Name of the Vulnerable Software and Affected Versions IBM WebSphere eXtreme Scale versions 7.1.0 through 7.1.0.2 IBM WebSphere eXtreme Scale versions 7.1.1 through 7.1.1.0 Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks vi...

IBM WebSphere eXtreme Scale Certificate Brute Force Breach Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution. IBM WebSphere Extreme Scale failed to properly set up user logout functionality, allowing remote attackers to exploit a vulnerability to brute-force account credentials...

IBM WebSphere eXtreme Scale Access Privilege Bypass Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution. IBM WebSphere Extreme Scale does not invalidate pre-existing session identifiers, allowing remote attackers to exploit the vulnerability to gain access to other users...

IBM WebSphere eXtreme Scale Security Bypass Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution. IBM WebSphere Extreme Scale failed to properly handle logout operations, allowing an attacker to exploit a vulnerability to bypass security restrictions on other user sessions...

IBM WebSphere eXtreme Scale Cross-Site Request Forgery Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution. A cross-site request forgery vulnerability exists in IBM WebSphere Extreme Scale, which allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious actions in the context of the target use...

IBM WebSphere eXtreme Scale Information Disclosure Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution. IBM WebSphere Extreme Scale does not set a security flag for session cookies in SSL mode, allowing remote attackers to obtain cookie information by intercepting HTTP sessions...

IBM WebSphere eXtreme Scale Cross-Site Scripting Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution. A cross-site scripting vulnerability exists in IBM WebSphere Extreme Scale, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information ...

IBM WebSphere eXtreme Scale Answer Injection Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution. A security vulnerability in IBM WebSphere Extreme Scale allows a remote attacker to submit a specially crafted URL to insert a malicious response into a request waiting to be sent...