Ibm

Websphere Application Server

443 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2011-1322

  • EPSS 0.53%
  • Veröffentlicht 08.03.2011 21:59:35
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumpt...

2.1

CVE-2011-1307

  • EPSS 0.05%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability ...

4.3

CVE-2011-1308

  • EPSS 0.3%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via uns...

7.5

CVE-2011-1309

  • EPSS 0.4%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Plug-in component in IBM WebSphere Application Server (WAS) before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors.

1.9

CVE-2011-1310

  • EPSS 0.05%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Administrative Scripting Tools component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when tracing is enabled, places wsadmin command parameters into the (1) wsadmin.traceout and (2) trace.log files, ...

6

CVE-2011-1311

  • EPSS 0.3%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Security component in IBM WebSphere Application Server (WAS) before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.x...

4

CVE-2011-1312

  • EPSS 0.12%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended...

5

CVE-2011-1313

  • EPSS 0.31%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Double free vulnerability in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote backend IIOP servers to cause a denial of service (S0C4 ABEND and storage corruption) by rejecting IIOP requests at oppo...

5

CVE-2011-1314

  • EPSS 0.46%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Service Integration Bus (SIB) messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (daemon hang) by performing close operations via network connections to a queue manager.

5

CVE-2011-1315

  • EPSS 0.81%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Memory leak in the messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via network connections associated with a NULL return value from a synchronous JMS...