CVE-2011-1377: Undefined Security Weakness

The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server WAS 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors...

PT-2012-1513

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS 6.1 versions prior to 6.1.0.41 Description The Web Services Security component in the Web Services Feature Pack for IBM WebSphere Application Server does not properly handle the enabling of WS-Security for ...

PT-2012-2043

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 6.1.0.41 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging. Recommendations For versions prior to...

CVE-2011-5065: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging...

CVE-2011-1362: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Installation Verification Test IVT application in the Install component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 and 7.0 before 7.0.0.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE:...

CVE-2011-5066: Exposure of Sensitive Information to an Unauthorized Actor

The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 does not properly handle a Service Integration Bus SIB dump operation involving the First Failure Data Capture FFDC introspection code, which allows local users to...

PT-2012-1510

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.41 IBM WebSphere Application Server versions 7.0 before 7.0.0.19 Description A cross-site scripting XSS issue exists in the Installation Verification Test IVT application, allowing...

DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal [CVE-2011-1359]

Title ----- DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal CVE-2011-1359 Severity -------- High Date Discovered --------------- July 28, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Javier Castro,...

IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability

The host is running IBM WebSphere Application Server and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasadminconsolexssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability Authors:...

IBM WebSphere Application Server JNDI information disclosure Vulnerability

The host is running IBM WebSphere Application Server and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasjndiimpinfodisclosurevuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server JNDI information disclosure Vulnerability Authors:...

IBM WebSphere Application Server 6.0.x < 6.0.2.39, 6.1.x < 6.1.0.29, 7.0.x < 7.0.0.7 Information Disclosure Vulnerability

IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security feature bypass

The Java Naming and Directory Interface JNDI implementation in IBM WebSphere Application Server WAS 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via ...

CVE-2009-2748: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2747: Undefined Security Weakness

The Java Naming and Directory Interface JNDI implementation in IBM WebSphere Application Server WAS 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via ...

PT-2011-1302

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.29 IBM WebSphere Application Server versions 7.1 before 7.0.0.7, but since 7.0.0.7 is less than 7.1, it is more accurate to say 7.0 before 7.0.0.7 and 7.1 before the first version of...

PT-2011-1301

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.0 through 6.0.2.38 IBM WebSphere Application Server versions 6.1 through 6.1.0.28 IBM WebSphere Application Server versions 7.0 through 7.0.0.6 Description The Java Naming and Directory Interface JND...

PT-2011-3088

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 8.0.0.1 Description The issue is related to the JavaServer Faces JSF application functionality, which does not properly handle requests. This allows remote attackers to read unspecified files...

CVE-2011-1368: Exposure of Sensitive Information to an Unauthorized Actor

The JavaServer Faces JSF application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors...

CVE-2011-1360

Multiple cross-site scripting XSS vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in 1 manual/ibm/ and 2...

CVE-2011-1360

Multiple cross-site scripting XSS vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in 1 manual/ibm/ and 2...