Ibm

Websphere Application Server

519 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2021-29754

  • EPSS 0.74%
  • Veröffentlicht 11.06.2021 15:15:11
  • Zuletzt bearbeitet 21.11.2024 06:01:44

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 202006.

8.2

CVE-2021-20492

  • EPSS 2.07%
  • Veröffentlicht 26.05.2021 17:15:14
  • Zuletzt bearbeitet 21.11.2024 05:46:39

IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or cons...

8.2

CVE-2021-20454

  • EPSS 2.91%
  • Veröffentlicht 21.04.2021 12:15:08
  • Zuletzt bearbeitet 21.11.2024 05:46:37

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resou...

8.2

CVE-2021-20453

  • EPSS 2.56%
  • Veröffentlicht 20.04.2021 12:15:12
  • Zuletzt bearbeitet 21.11.2024 05:46:37

IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources....

6.5

CVE-2021-20480

  • EPSS 1.3%
  • Veröffentlicht 08.04.2021 13:15:13
  • Zuletzt bearbeitet 21.11.2024 05:46:38

IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID:...

6.5

CVE-2020-5016

  • EPSS 2.25%
  • Veröffentlicht 10.03.2021 15:15:12
  • Zuletzt bearbeitet 21.11.2024 05:33:33

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When application security is disabled and JAX-RPC applications are present, an attacker could send a specially-crafted URL re...

7.8

CVE-2021-20354

  • EPSS 3.7%
  • Veröffentlicht 18.02.2021 15:15:14
  • Zuletzt bearbeitet 21.11.2024 05:46:27

IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ...

8.2

CVE-2021-20353

  • EPSS 5.16%
  • Veröffentlicht 10.02.2021 17:15:22
  • Zuletzt bearbeitet 21.11.2024 05:46:27

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory reso...

8.2

CVE-2020-4949

  • EPSS 4.75%
  • Veröffentlicht 26.01.2021 15:15:13
  • Zuletzt bearbeitet 21.11.2024 05:33:27

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory reso...

6.5

CVE-2020-4782

  • EPSS 2.57%
  • Veröffentlicht 28.10.2020 17:15:13
  • Zuletzt bearbeitet 21.11.2024 05:33:14

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the s...