PT-2011-2262

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.35 IBM WebSphere Application Server versions 7.0 before 7.0.0.15 Description A cross-site scripting XSS issue exists due to the lack of an error page for an application, allowing remot...

CVE-2011-0315: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to the lack of an error page for an...

CVE-2011-0316: Undefined Security Weakness

The Administrative Console component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request...

PT-2011-2263

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.35 IBM WebSphere Application Server versions 7.0 before 7.0.0.15 Description The issue concerns the Administrative Console component in IBM WebSphere Application Server, which fails to...

IBM WebSphere Application Server (WAS) Multiple Vulnerabilities

The host is running IBM WebSphere Application Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmwasmultvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ IBM WebSphere Application Server WAS Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010...

CVE-2010-0783

Cross-site scripting XSS vulnerability in the Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-0786

The Web Services Security component in IBM WebSphere Application Server WAS 7.0 before 7.0.0.13 does not properly implement the Java API for XML Web Services aka JAX-WS, which allows remote attackers to cause a denial of service data corruption via a crafted JAX-WS request that leads to incorrect...

CVE-2010-0785

Cross-site request forgery CSRF vulnerability in the Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-0783

Cross-site scripting XSS vulnerability in the Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-0786

IBM WebSphere Application Server 7.x is affected by CVE-2010-0786 in the Web Services Security/JAX-WS handling. WAS 7.0 before 7.0.0.13 allows remote attackers to trigger a denial of service via a crafted JAX-WS request that leads to data corruption due to improper JAX-WS implementation. Affected...

CVE-2010-4220

IBM WebSphere Application Server 7.x is vulnerable to a cross-site scripting (XSS) issue in the Integrated Solution Console and Administrative Console. The vulnerability, CVE-2010-4220, arises from improper input filtering (related to URL injection) and affects WAS 7.0 before 7.0.0.13. Remote att...

CVE-2010-4220: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Integrated Solution Console in the Administrative Console component in IBM WebSphere Application Server WAS 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection."...

PT-2010-5368

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.13 Description A cross-site scripting XSS issue exists in the Integrated Solution Console of the Administrative Console component, allowing remote attackers to inject arbitrary web scrip...

PT-2010-2515

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.35 IBM WebSphere Application Server versions 7.0 before 7.0.0.13 Description A cross-site scripting XSS issue exists in the Administrative Console of IBM WebSphere Application Server,...

PT-2010-2516

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.13 Description A cross-site scripting XSS issue exists in the Administrative Console of IBM WebSphere Application Server, allowing remote attackers to inject arbitrary web script or HTML...

PT-2010-2518

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0.0 through 7.0.0.12 Description The issue is related to the improper implementation of the Java API for XML Web Services JAX-WS in the Web Services Security component. This allows remote attackers t...

PT-2010-2517

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.35 IBM WebSphere Application Server versions 7.0 before 7.0.0.13 Description A cross-site request forgery CSRF issue exists in the Administrative Console of IBM WebSphere Application...

CVE-2010-0784: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administrative Console in IBM WebSphere Application Server WAS 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-0786: Improper Input Validation

The Web Services Security component in IBM WebSphere Application Server WAS 7.0 before 7.0.0.13 does not properly implement the Java API for XML Web Services aka JAX-WS, which allows remote attackers to cause a denial of service data corruption via a crafted JAX-WS request that leads to incorrect...

CVE-2010-0785: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...