Ibm

Websphere Application Server

439 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2011-1683

  • EPSS 1.38%
  • Veröffentlicht 13.04.2011 14:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified ap...

5

CVE-2011-1317

  • EPSS 0.46%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory c...

5

CVE-2011-1318

  • EPSS 0.53%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Memory leak in org.apache.jasper.runtime.JspWriterImpl.response in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by accessing a...

4

CVE-2011-1319

  • EPSS 0.41%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote authenticated users to cause a denial of service (memory consumption) by using a Lightweight Third-Party Authentication (LT...

6.8

CVE-2011-1320

  • EPSS 0.48%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when the Tivoli Integrated Portal / embedded WebSphere Application Server (TIP/eWAS) framework is used, does not properly delete AuthCac...

6.5

CVE-2011-1321

  • EPSS 0.32%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The AuthCache purge implementation in the Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 does not purge a user from the PlatformCredential cache, which might allow remote authenticated use...

5

CVE-2011-1322

  • EPSS 0.53%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumpt...

2.1

CVE-2011-1307

  • EPSS 0.05%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability ...

4.3

CVE-2011-1308

  • EPSS 0.3%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via uns...

7.5

CVE-2011-1309

  • EPSS 0.4%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors.