Ibm

Websphere Application Server

443 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.8

CVE-2011-1355

  • EPSS 0.54%
  • Veröffentlicht 19.07.2011 20:55:00
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter.

2.1

CVE-2011-1356

  • EPSS 0.06%
  • Veröffentlicht 19.07.2011 20:55:00
  • Zuletzt bearbeitet 29.04.2026 01:13:23

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request.

6.8

CVE-2010-3271

Exploit
  • EPSS 0.61%
  • Veröffentlicht 18.07.2011 22:55:00
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administ...

4.3

CVE-2011-1209

  • EPSS 0.13%
  • Veröffentlicht 04.05.2011 22:55:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which makes it easier for remote attackers to obtain plaintext data from a (1) JAX-RPC or (2) JAX-WS Web Services req...

6.8

CVE-2011-1683

  • EPSS 1.38%
  • Veröffentlicht 13.04.2011 14:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified ap...

5

CVE-2011-1317

  • EPSS 0.46%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory c...

5

CVE-2011-1318

  • EPSS 0.53%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Memory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by accessing a...

4

CVE-2011-1319

  • EPSS 0.41%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote authenticated users to cause a denial of service (memory consumption) by using a Lightweight Third-Party Authentication (LT...

6.8

CVE-2011-1320

  • EPSS 0.48%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCac...

6.5

CVE-2011-1321

  • EPSS 0.32%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 does not purge a user from the PlatformCredential cache, which might allow remote authenticated use...