CVE-2019-4505

CVE-2019-4505 affects IBM WebSphere Application Server Network Deployment (ND) across multiple release lines (e.g., 9.0.0.0, 8.5.x, 8.0, 7.0, 6.1). A remote attacker can obtain sensitive information by sending a specially crafted URL, potentially allowing viewing of files in a restricted director...

CVE-2020-4448

CVE-2020-4448 affects IBM WebSphere Application Server Network Deployment (ND) on versions 7.0, 8.0, 8.5 and 9.0. The vulnerability allows remote code execution by processing a specially crafted sequence of serialized objects from untrusted sources, enabling an attacker to run arbitrary code on t...

CVE-2015-1946

CVE-2015-1946 affects IBM WebSphere Application Server (WAS) and WebSphere Virtual Enterprise. It enables local privilege escalation due to incorrect handling of user roles, with vulnerable versions including WAS 8.5 prior to 8.5.5.6 and WAS 7.0/8.0 prior to their respective fixes; remediation is...

CVE-2019-4030

Summary of CVE-2019-4030 (IBM WebSphere Application Server) This CVE describes a cross-site scripting (XSS) vulnerability in the WebSphere Application Server Admin Console. An authenticated remote attacker could embed arbitrary JavaScript in the Admin Console UI, potentially leading to credential...

CVE-2013-6323

CVE-2013-6323 is a cross-site scripting vulnerability in the Administration Console of IBM WebSphere Application Server (WAS) and WebSphere Virtual Enterprise. It can be exploited by a remote authenticated user via a crafted URL to inject script/HTML into a victim’s browser. Affected WAS versions...

CVE-2015-1932

CVE-2015-1932 affects IBM WebSphere Application Server and WebSphere Virtual Enterprise; versions affected include WAS 7.x prior to 7.0.0.39, WAS 8.0.x prior to 8.0.0.11, WAS 8.5.x prior to 8.5.5.7 and WebSphere Virtual Enterprise on WAS 7/8.0/8.5.0.x prior to respective fix packs. Root cause is ...

CVE-2020-4575

CVE-2020-4575 affects IBM WebSphere Application Server ND 8.5/9.0 and WebSphere Virtual Enterprise 7.0/8.0, with a cross-site scripting vulnerability when High Availability Deployment Manager is configured. The Connected IBM Security Bulletins indicate remediation via upgrading to fixed WebSphere...

CVE-2013-5425

IBM WebSphere Virtual Enterprise CVE-2013-5425 is an XSS vulnerability in the Administration Console exploitable by remote authenticated users via a crafted URL. Affected versions: VE 6.1 prior to 6.1.1.6 and VE 7.0 prior to 7.0.0.4. Mitigation: apply theFix Pack/Interim Fix PM93828. For VE 7.0, ...