Ibm

Websphere Application Server

435 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2011-1320

  • EPSS 0.48%
  • Published 08.03.2011 21:59:35
  • Last modified 11.04.2025 00:51:21

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCac...

6.5

CVE-2011-1321

  • EPSS 0.32%
  • Published 08.03.2011 21:59:35
  • Last modified 11.04.2025 00:51:21

The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 does not purge a user from the PlatformCredential cache, which might allow remote authenticated use...

5

CVE-2011-1322

  • EPSS 0.53%
  • Published 08.03.2011 21:59:35
  • Last modified 11.04.2025 00:51:21

The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumpt...

2.1

CVE-2011-1307

  • EPSS 0.05%
  • Published 08.03.2011 21:59:34
  • Last modified 11.04.2025 00:51:21

The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability ...

4.3

CVE-2011-1308

  • EPSS 0.3%
  • Published 08.03.2011 21:59:34
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via uns...

7.5

CVE-2011-1309

  • EPSS 0.4%
  • Published 08.03.2011 21:59:34
  • Last modified 11.04.2025 00:51:21

The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors.

1.9

CVE-2011-1310

  • EPSS 0.05%
  • Published 08.03.2011 21:59:34
  • Last modified 11.04.2025 00:51:21

The Administrative Scripting Tools component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when tracing is enabled, places wsadmin command parameters into the (1) wsadmin.traceout and (2) trace.log files, ...

6

CVE-2011-1311

  • EPSS 0.3%
  • Published 08.03.2011 21:59:34
  • Last modified 11.04.2025 00:51:21

The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.x...

4

CVE-2011-1312

  • EPSS 0.12%
  • Published 08.03.2011 21:59:34
  • Last modified 11.04.2025 00:51:21

The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended...

5

CVE-2011-1313

  • EPSS 0.31%
  • Published 08.03.2011 21:59:34
  • Last modified 11.04.2025 00:51:21

Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at oppo...