Websphere Service Registry And Repository@7.5.0.3 Security Vulnerabilities and Issues — Websphere Service Registry And Repository@7.5.0.3 CVE List

Lucene search

IbmWebsphere Service Registry And Repository7.5.0.3

7 matches found

CVE•added 2014/12/24 11:59 a.m.•41 views

CVE-2014-6153

The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture...

4.3CVSS6.1AI score0.00609EPSS

CVE•added 2014/05/30 5:55 p.m.•38 views

CVE-2014-3010

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.2, 6.3 before 6.3.0.6, 7.0 before 7.0.0.6, 7.5 before 7.5.0.5, and 8.0 before 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

4.3CVSS5.7AI score0.00256EPSS

CVE•added 2014/12/24 11:59 a.m.•37 views

CVE-2014-6132

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML v...

3.5CVSS5AI score0.00308EPSS

CVE•added 2013/12/17 3:21 p.m.•34 views

CVE-2013-6721

Cross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.x through 8.0.0.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving widgets.

3.5CVSS5.2AI score0.00253EPSS

CVE•added 2014/12/24 11:59 a.m.•34 views

CVE-2014-6155

Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allow remote authenticated users to read arbitrary files via unspecified vectors.

4CVSS6.3AI score0.00316EPSS

CVE•added 2014/12/24 11:59 a.m.•29 views

CVE-2014-6178

Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.1AI score0.00162EPSS

CVE•added 2014/12/24 11:59 a.m.•29 views

CVE-2014-6179

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.6AI score0.00249EPSS