Ibm

Websphere Application Server

435 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2011-1368

  • EPSS 0.21%
  • Published 29.10.2011 10:55:08
  • Last modified 11.04.2025 00:51:21

The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors.

5

CVE-2011-1359

  • EPSS 0.19%
  • Published 06.09.2011 15:55:02
  • Last modified 11.04.2025 00:51:21

Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, and 8.0 before 8.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

5.8

CVE-2011-1355

  • EPSS 0.54%
  • Published 19.07.2011 20:55:00
  • Last modified 11.04.2025 00:51:21

Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter.

2.1

CVE-2011-1356

  • EPSS 0.06%
  • Published 19.07.2011 20:55:00
  • Last modified 11.04.2025 00:51:21

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request.

6.8

CVE-2010-3271

Exploit
  • EPSS 0.8%
  • Published 18.07.2011 22:55:00
  • Last modified 11.04.2025 00:51:21

Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administ...

4.3

CVE-2011-1209

  • EPSS 0.13%
  • Published 04.05.2011 22:55:03
  • Last modified 11.04.2025 00:51:21

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which makes it easier for remote attackers to obtain plaintext data from a (1) JAX-RPC or (2) JAX-WS Web Services req...

6.8

CVE-2011-1683

  • EPSS 1.38%
  • Published 13.04.2011 14:55:01
  • Last modified 11.04.2025 00:51:21

IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified ap...

5

CVE-2011-1317

  • EPSS 0.46%
  • Published 08.03.2011 21:59:35
  • Last modified 11.04.2025 00:51:21

Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory c...

5

CVE-2011-1318

  • EPSS 0.53%
  • Published 08.03.2011 21:59:35
  • Last modified 11.04.2025 00:51:21

Memory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by accessing a...

4

CVE-2011-1319

  • EPSS 0.41%
  • Published 08.03.2011 21:59:35
  • Last modified 11.04.2025 00:51:21

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote authenticated users to cause a denial of service (memory consumption) by using a Lightweight Third-Party Authentication (LT...