Lucene search
+L

13745 matches found

CNNVD
CNNVD
added 2021/05/27 12:00 a.m.10 views

IBM WebSphere Exteme Scale 跨站脚本漏洞

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. A cross-site scripting vulnerability exists in IBM WebSphere Exteme Scale Liberty, which stems from a lack of proper validati...

5.3AI score
SaveExploits0References1
CNVD
CNVD
added 2021/05/27 12:00 a.m.6 views

IBM WebSphere Application Server Injection Vulnerability

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An injection vulnerability exists in IBM WebSphere Application Serv...

8.2CVSS6.4AI score0.02071EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/27 12:00 a.m.9 views

IBM WebSphere eXtreme Scale 安全漏洞

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. A security vulnerability exists in IBM WebSphere eXtreme Scale Liberty Deployment XSLD, which can be exploited by a remote...

5.7AI score
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/27 12:00 a.m.9 views

IBM WebSphere Exteme Scale 安全漏洞

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. A security vulnerability exists in IBM WebSphere Exteme Scale Liberty, which can be exploited by a remote attacker to obtain...

5.6AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2021/05/26 7:53 p.m.19 views

Security Bulletin: WebSphere Application Server Java Batch shipped with IBM WebSphere Application Server Patterns is vulnerable to an XML External Entity Injection (XXE) vulnerability (CVE-2021-20492)

Summary WebSphere Application Server is shipped as a component of IBM WebSphere Application Server Patterns. Information about security vulnerabilities affecting WebSphere Application Server have been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed i...

8.2CVSS2.9AI score0.02071EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/05/26 6:49 p.m.22 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects WebSphere Application Server April 2021 CPU that is bundled with IBM WebSphere Application Server Patterns

Summary There are multiple vulnerabilities in the IBM SDK Java Technology Edition that is shipped with IBM WebSphere Application Server. These issues were disclosed in the IBM Java SDK updates in April 2021. Vulnerability Details CVEID: CVE-2021-2161 DESCRIPTION: An unspecified vulnerability in...

5.9CVSS1.1AI score0.03125EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2021/05/26 5:15 p.m.12 views

CVE-2021-20492

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197793...

8.2CVSS0.02071EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/26 5:15 p.m.5 views

CVE-2021-20492

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197793...

8.2CVSS6.8AI score0.02071EPSS
SaveExploits0References2
Prion
Prion
added 2021/05/26 5:15 p.m.16 views

Xxe

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197793...

6.4CVSS8AI score0.02071EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/05/26 4:20 p.m.15 views

CVE-2021-20492

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197793...

6.5CVSS8.2AI score0.02071EPSS
SaveExploits0References2
CVE
CVE
added 2021/05/26 4:20 p.m.131 views

CVE-2021-20492

CVE-2021-20492 affects IBM WebSphere Application Server family (8.0/8.5/9.0 and Liberty Java Batch) and Liberty for IBM Cloud; it is an XML External Entity (XXE) injection flaw in XML processing. Attackers could remotely expose sensitive information or cause resource exhaustion due to memory cons...

8.2CVSS8AI score0.02071EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/05/26 9:58 a.m.25 views

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Intelligent Operations Center (CVE-2021-20492)

Summary IBM WebSphere® Application Server is shipped with IBM® Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

8.2CVSS2.3AI score0.02071EPSS
SaveExploits0Affected Software2
NCSC
NCSC
added 2021/05/26 12:00 a.m.8 views

Vulnerabilities verhopen in IBM WebSphere Appliction Server

IBM has fixed a vulnerability in WebSphere Application Server Java Batch. A malicious party could potentially exploit it to cause a denial-of-service or to gaining access to sensitive data. To do so, the malicious party induces the server to process a rogue XML file. processing. IBM has released...

8.2CVSS6.6AI score0.02071EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/05/25 6:31 p.m.36 views

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM Security Identity Manager

Summary IBM WebSphere Application Server WAS is shipped with IBM Security Identity Manager ISIM. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

9.8CVSS2.7AI score0.03566EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/05/25 5:22 p.m.27 views

Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to a directory traversal vulnerability (CVE-2021-20354)

Summary WebSphere Application Server is vulnerable to a directory traversal vulnerability. This has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- Jazz for Service...

7.8CVSS2.4AI score0.03696EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2021/05/25 12:00 a.m.7 views

IBM WebSphere Application Server 代码问题漏洞

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An injection vulnerability exists in IBM WebSphere Application Serv...

8.2CVSS6.9AI score0.02071EPSS
SaveExploits0References18
ATTACKERKB
ATTACKERKB
added 2021/05/25 12:00 a.m.6 views

CVE-2021-20492

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197793...

8.2CVSS6.8AI score0.02071EPSS
SaveExploits0References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/05/24 10:52 p.m.29 views

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager

Summary IBM WebSphere Application Server WAS is shipped with IBM Security Identity Manager ISIM. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

5.8CVSS6.6AI score0.1876EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/05/24 4:08 p.m.40 views

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server April 2021 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server. These might affect some configurations of IBM WebSphere Application Server Traditional, IBM WebSphere Application Server Liberty and IBM WebSphere Applicatio...

5.9CVSS0.5AI score0.03125EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/05/24 2:38 p.m.8 views

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Tivoli Access Manager for e-business

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Access Manager for e-business. Information about security vulnerabilitird affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

0.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder