IBM WebSphere Application Server Liberty Profile Cross-Site Scripting Vulnerability

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform.Liberty Profile is a WAS dynamic server Liberty Profile is a...

IBM WebSphere Application Server Information Disclosure Vulnerability (swg21982588)

IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-0385

Buffer overflow in IBM WebSphere Application Server WAS 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, and Liberty before 16.0.0.3, when HttpSessionIdReuse is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-0385: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in IBM WebSphere Application Server WAS 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, and Liberty before 16.0.0.3, when HttpSessionIdReuse is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors...

PT-2016-4176

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0 through 7.0.0.42 IBM WebSphere Application Server versions 8.0 through 8.0.0.12 IBM WebSphere Application Server versions 8.5 through 8.5.5.9 IBM WebSphere Application Server versions 9.0 through...

IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2016-06420)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. An information disclosure vulnerability exists in IBM WAS,...

IBM WebSphere Application Server Security Bypass Vulnerability (CNVD-2016-06419)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A security bypass vulnerability exists in IBM WAS that...

CVE-2016-2960: Improper Access Control

IBM WebSphere Application Server WAS 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages...

PT-2016-5305

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.42 IBM WebSphere Application Server versions 8.0.0.x through 8.0.0.12 IBM WebSphere Application Server versions 8.5.0.x through 8.5.5.9 IBM WebSphere Application Server Liberty versio...

IBM WebSphere Application Server RCE Vulnerability (Nov 2015) - Active Check

IBM WebSphere Application Server is prone to a remote code execution RCE vulnerability in Apache Commons Collections. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

The vulnerability of WebSphere Application Server application servers allows attackers to gain access to protected information.

The vulnerability of WebSphere Application Server applications stems from the absence of the HTTPOnly flag in the Set-Cookie header. Exploiting this vulnerability allows a malicious actor to gain access to protected information through a cookie-based access scenario...

The vulnerability of WebSphere Application Server application servers allows attackers to obtain confidential information.

The vulnerability of the Admin Center component of WebSphere Application Server is related to the lack of protection for operational data. Exploiting this vulnerability may allow a malicious actor to obtain confidential information from a remote location...

IBM WebSphere Application Server Liberty Multiple Liberty Vulnerabilities (Jul 2016)

IBM WebSphere Application Server Liberty is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-2945

The API Discovery implementation in IBM WebSphere Application Server WAS 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document...

CVE-2016-2945: Undefined Security Weakness

The API Discovery implementation in IBM WebSphere Application Server WAS 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document...

PT-2016-2310

Name of the Vulnerable Software and Affected Versions WebSphere Application Server versions 8.5.5.8 through 8.5.5.9 Description The issue is related to the implementation of the API Discovery server in WebSphere Application Server, which is associated with insufficient access control. This can be...

CVE-2016-2923

IBM WebSphere Application Server WAS 8.5 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified JAX-RS API cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script acces...

CVE-2016-0389: Exposure of Sensitive Information to an Unauthorized Actor

Admin Center in IBM WebSphere Application Server WAS 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2016-2327

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 Description The issue is related to the lack of protection for service data in the Admin Center component of the WebSphere Applicati...

The vulnerability of WebSphere Application Server application servers allows attackers to read arbitrary files.

The vulnerability of WebSphere Application Server’s application servers exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files using a specially crafted URL...