Ibm

Websphere Application Server

443 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4

CVE-2010-0781

  • EPSS 0.51%
  • Veröffentlicht 21.09.2010 20:00:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Unspecified vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted URL.

10

CVE-2010-3186

  • EPSS 1.42%
  • Veröffentlicht 30.08.2010 20:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, when a JAX-WS application is used, does not properly handle an IncludeTimestamp setting in the WS-Sec...

4.3

CVE-2010-0778

  • EPSS 0.2%
  • Veröffentlicht 24.06.2010 17:30:00
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 and 7.0 before 7.0.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3

CVE-2010-0779

  • EPSS 0.2%
  • Veröffentlicht 24.06.2010 17:30:00
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11 allows remote attackers to inject arbitrary web script or HTML via unsp...

5

CVE-2010-2323

  • EPSS 0.3%
  • Veröffentlicht 18.06.2010 18:30:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creation by the BBOWWPFx job and the zPMT.

7.5

CVE-2010-2324

  • EPSS 0.4%
  • Veröffentlicht 18.06.2010 18:30:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link injection" actions via unknown vectors.

4.3

CVE-2010-2325

  • EPSS 0.25%
  • Veröffentlicht 18.06.2010 18:30:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "U...

4.3

CVE-2010-2326

  • EPSS 0.49%
  • Veröffentlicht 18.06.2010 18:30:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain sensitive information about CIMMetadataCollectorImpl trace actions by reading the addNode.log file.

4.3

CVE-2010-2327

  • EPSS 0.76%
  • Veröffentlicht 18.06.2010 18:30:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow r...

5

CVE-2010-2328

  • EPSS 0.53%
  • Veröffentlicht 18.06.2010 18:30:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression.