Ibm

Websphere Application Server

435 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2011-1320

  • EPSS 0.48%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCac...

6.5

CVE-2011-1321

  • EPSS 0.32%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 does not purge a user from the PlatformCredential cache, which might allow remote authenticated use...

5

CVE-2011-1322

  • EPSS 0.53%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumpt...

2.1

CVE-2011-1307

  • EPSS 0.05%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability ...

4.3

CVE-2011-1308

  • EPSS 0.3%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via uns...

7.5

CVE-2011-1309

  • EPSS 0.4%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors.

1.9

CVE-2011-1310

  • EPSS 0.05%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Administrative Scripting Tools component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when tracing is enabled, places wsadmin command parameters into the (1) wsadmin.traceout and (2) trace.log files, ...

6

CVE-2011-1311

  • EPSS 0.3%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.x...

4

CVE-2011-1312

  • EPSS 0.12%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended...

5

CVE-2011-1313

  • EPSS 0.31%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at oppo...