Ibm

Websphere Application Server

435 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.6

CVE-2009-0433

  • EPSS 0.71%
  • Veröffentlicht 10.02.2009 22:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, when Web Server plug-in content buffering is enabled, allows attackers to cause a denial of service (daemon c...

1.9

CVE-2009-0434

  • EPSS 0.06%
  • Veröffentlicht 10.02.2009 22:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.31, 6.1.x before 6.1.0.21, and 7.0.x before 7.0.0.1, when Performance Monitoring Infrastructure (PMI) is enabled, allows local users to ob...

5

CVE-2009-0435

  • EPSS 0.37%
  • Veröffentlicht 10.02.2009 22:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in the IBM Asynchronous I/O (aka AIO or libibmaio) library in the Java Message Service (JMS) component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.17 on AIX 5.3 allows attackers to cause a denial of service ...

7.2

CVE-2009-0436

  • EPSS 0.06%
  • Veröffentlicht 10.02.2009 22:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack v...

1.9

CVE-2009-0437

  • EPSS 0.06%
  • Veröffentlicht 10.02.2009 22:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The Installation Factory installation process for IBM WebSphere Application Server (WAS) 6.0.2 on Windows, when WAS is registered as a Windows service, allows local users to obtain sensitive information by reading the logs/instconfigifwas6.log log fi...

5

CVE-2009-0438

  • EPSS 0.21%
  • Veröffentlicht 10.02.2009 22:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization checking" and obtain sensitive information from JSP pages via a crafted request. NOTE: this is probably a duplicate of CVE-2008-5412.

7.8

CVE-2009-0391

  • EPSS 0.44%
  • Veröffentlicht 02.02.2009 22:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0.1 on z/OS allows attackers to read arbitrary files via unknown vectors.

5

CVE-2008-5411

  • EPSS 0.43%
  • Veröffentlicht 10.12.2008 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

10

CVE-2008-5412

  • EPSS 1.35%
  • Veröffentlicht 10.12.2008 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and attack vectors related to JSPs. NOTE: this is probably a duplicate of CVE-2009-0438.

5

CVE-2008-5413

  • EPSS 0.3%
  • Veröffentlicht 10.12.2008 00:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of...