Ibm

Websphere Application Server

439 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2015-7417

  • EPSS 0.17%
  • Veröffentlicht 23.01.2016 05:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 7.0 before 7.0.0.41, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.9 allows remote authenticated users to inject arbitrary web script or HTML via crafted data from an OAuth prov...

10

CVE-2015-7450

Warnung Exploit
  • EPSS 93.49%
  • Veröffentlicht 02.01.2016 21:59:15
  • Zuletzt bearbeitet 22.10.2025 00:15:45

Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerT...

4

CVE-2015-5004

  • EPSS 0.17%
  • Veröffentlicht 15.12.2015 05:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Edge Component Caching Proxy in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.12 and 8.5 before 8.5.5.8 does not properly encrypt data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

4.3

CVE-2015-2017

  • EPSS 0.35%
  • Veröffentlicht 08.11.2015 22:59:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting...

5

CVE-2015-4938

  • EPSS 0.38%
  • Veröffentlicht 22.08.2015 23:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 allows remote attackers to spoof servlets and obtain sensitive information via unspecified vectors.

5

CVE-2015-1932

  • EPSS 0.38%
  • Veröffentlicht 22.08.2015 23:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software b...

4.4

CVE-2015-1946

  • EPSS 0.06%
  • Veröffentlicht 14.07.2015 17:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user roles, which allows local users to gain privileges via...

6

CVE-2015-1936

  • EPSS 0.31%
  • Veröffentlicht 14.07.2015 17:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The administrative console in IBM WebSphere Application Server (WAS) 8.0.0 before 8.0.0.11 and 8.5 before 8.5.5.6, when the Security feature is disabled, allows remote authenticated users to hijack sessions via the JSESSIONID parameter.

6.8

CVE-2015-1927

  • EPSS 0.58%
  • Veröffentlicht 14.07.2015 17:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The default configuration of IBM WebSphere Application Server (WAS) 7.0.0 before 7.0.0.39, 8.0.0 before 8.0.0.11, and 8.5 before 8.5.5.6 has a false value for the com.ibm.ws.webcontainer.disallowServeServletsByClassname WebContainer property, which a...

10

CVE-2015-1920

  • EPSS 18.39%
  • Veröffentlicht 20.05.2015 00:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session.