Ibm

Websphere Application Server

443 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2011-1316

  • EPSS 0.53%
  • Veröffentlicht 08.03.2011 21:59:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending ...

4.3

CVE-2008-7274

  • EPSS 0.23%
  • Veröffentlicht 15.02.2011 01:00:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password.

4.3

CVE-2011-0315

  • EPSS 0.48%
  • Veröffentlicht 12.01.2011 01:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors ...

5

CVE-2011-0316

  • EPSS 0.65%
  • Veröffentlicht 12.01.2011 01:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status inf...

4.3

CVE-2010-4220

  • EPSS 0.27%
  • Veröffentlicht 09.11.2010 21:00:06
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the Integrated Solution Console in the Administrative Console component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspe...

4.3

CVE-2010-0783

  • EPSS 0.48%
  • Veröffentlicht 09.11.2010 21:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3

CVE-2010-0784

  • EPSS 0.49%
  • Veröffentlicht 09.11.2010 21:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6

CVE-2010-0785

  • EPSS 0.27%
  • Veröffentlicht 09.11.2010 21:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknow...

5

CVE-2010-0786

  • EPSS 0.59%
  • Veröffentlicht 09.11.2010 21:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Web Services Security component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 does not properly implement the Java API for XML Web Services (aka JAX-WS), which allows remote attackers to cause a denial of service (data corruption)...

5

CVE-2010-3700

  • EPSS 0.25%
  • Veröffentlicht 29.10.2010 19:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parame...