Ibm

Websphere Extreme Scale

19 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2015-2029

  • EPSS 0.25%
  • Published 04.10.2015 02:59:13
  • Last modified 12.04.2025 10:46:40

Session fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to hijack web sessions via a session identifier.

4.3

CVE-2015-2028

  • EPSS 0.25%
  • Published 04.10.2015 02:59:12
  • Last modified 12.04.2025 10:46:40

CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.

2.1

CVE-2015-2027

  • EPSS 0.14%
  • Published 04.10.2015 02:59:10
  • Last modified 12.04.2025 10:46:40

IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 improperly performs logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.

6

CVE-2015-2026

  • EPSS 0.1%
  • Published 04.10.2015 02:59:09
  • Last modified 12.04.2025 10:46:40

Cross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

4.3

CVE-2015-2025

  • EPSS 0.25%
  • Published 04.10.2015 02:59:08
  • Last modified 12.04.2025 10:46:40

IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission with...

5

CVE-2015-4936

  • EPSS 0.53%
  • Published 03.08.2015 19:59:09
  • Last modified 12.04.2025 10:46:40

Unspecified vulnerability in IBM WebSphere eXtreme Scale 8.6 through 8.6.0.8 allows remote attackers to cause a denial of service via unknown vectors.

3.5

CVE-2013-5390

  • EPSS 0.19%
  • Published 16.10.2013 10:52:45
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

4.9

CVE-2013-5394

  • EPSS 0.16%
  • Published 16.10.2013 10:52:45
  • Last modified 11.04.2025 00:51:21

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors.

7.5

CVE-2013-5393

  • EPSS 0.4%
  • Published 16.10.2013 10:52:45
  • Last modified 11.04.2025 00:51:21

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.