6281 matches found
PT-2014-3980
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.0.2.0 through 6.0.2.43 IBM WebSphere Application Server versions 6.1.0.0 through 6.1.0.47 Description The issue allows remote attackers to cause a denial of service via crafted TLS traffic...
PT-2014-1410
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0.x through 7.0.0.32 IBM WebSphere Application Server versions 8.0.x through 8.0.0.8 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote attackers to...
CVE-2013-6323
Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or...
Cross site scripting
Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or...
CVE-2014-0859
CVE-2014-0859 affects IBM WebSphere Application Server where the web server plugin configured to retry failed POST requests may cause a denial of service (daemon crash). Affected: WAS 7.x up to 7.0.0.33, WAS 8.x up to 8.0.0.9, WAS 8.5.x up to 8.5.5.2. Remediation: apply the corresponding Fix Pack...
CVE-2014-0857
CVE-2014-0857 affects IBM WebSphere Application Server (WAS) Administrative Console. Affected versions: WAS 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2. Description: remote authenticated users can obtain sensitive information via a crafted request due to improper handling of requests in the Admin...
PT-2014-1409
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 7.x through 7.0.0.32 IBM WebSphere Application Server WAS versions 8.x through 8.0.0.8 IBM WebSphere Application Server WAS versions 8.5.x through 8.5.5.1 Description The issue affects the web-serv...
CVE-2013-6323: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or...
CVE-2014-0859: Undefined Security Weakness
The web-server plugin in IBM WebSphere Application Server WAS 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, when POST retries are enabled, allows remote attackers to cause a denial of service daemon crash via unspecified vectors...
CVE-2014-0823: Exposure of Sensitive Information to an Unauthorized Actor
IBM WebSphere Application Server WAS 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbitrary files via a crafted URL...
PT-2014-1403
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.0.0 through 8.0.0.8 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote attackers to read arbitrary files via a crafted URL, potentially giving access ...
PT-2014-1405
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.32 IBM WebSphere Application Server versions 8.x through 8.0.0.8 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 WebSphere Virtual Enterprise versions 7.x through...
PT-2014-3929
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS Liberty Profile versions 8.5.x through 8.5.5.1 Description The issue allows remote attackers to obtain sensitive information via a crafted request. Recommendations For versions 8.5.x through 8.5.5.1, update...
PT-2014-1302
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 8.0.0 through 8.0.0.8 IBM WebSphere Application Server WAS versions 8.5.x through 8.5.5.1 Description The issue allows remote authenticated users to obtain sensitive information via crafted request...
CVE-2014-0857: Exposure of Sensitive Information to an Unauthorized Actor
The Administrative Console in IBM WebSphere Application Server WAS 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote authenticated users to obtain sensitive information via a crafted request...
CVE-2014-0896: Exposure of Sensitive Information to an Unauthorized Actor
IBM WebSphere Application Server WAS Liberty Profile 8.5.x before 8.5.5.2 allows remote attackers to obtain sensitive information via a crafted request...
PT-2014-1406
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.30 IBM WebSphere Application Server versions 8.0.x through 8.0.0.7 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote authenticated...
PT-2014-1408
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.30 IBM WebSphere Application Server versions 8.0.x through 8.0.0.7 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote attackers to cau...
PT-2014-3091
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0.0 through 7.0.30 Description The issue allows remote authenticated users to obtain sensitive information via unspecified vectors when simpleFileServlet static file caching is enabled. Recommendatio...
CVE-2013-6725: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Administrative Console in IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL...