Ibm

Websphere Application Server

519 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2011-1362

  • EPSS 1.77%
  • Veröffentlicht 15.01.2012 03:55:12
  • Zuletzt bearbeitet 16.06.2026 23:29:13

Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 and 7.0 before 7.0.0.19 allows remote attackers to inject arbitrar...

10

CVE-2011-1377

  • EPSS 2.4%
  • Veröffentlicht 15.01.2012 03:55:12
  • Zuletzt bearbeitet 16.06.2026 23:29:14

The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack...

4.3

CVE-2011-5065

  • EPSS 1.93%
  • Veröffentlicht 15.01.2012 03:55:12
  • Zuletzt bearbeitet 16.06.2026 23:35:52

Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging.

5

CVE-2009-2747

  • EPSS 1.93%
  • Veröffentlicht 30.10.2011 10:55:02
  • Zuletzt bearbeitet 16.06.2026 23:10:09

The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows re...

4.3

CVE-2009-2748

  • EPSS 1.66%
  • Veröffentlicht 30.10.2011 10:55:02
  • Zuletzt bearbeitet 16.06.2026 23:10:09

Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

5

CVE-2011-1368

  • EPSS 1.93%
  • Veröffentlicht 29.10.2011 10:55:08
  • Zuletzt bearbeitet 16.06.2026 23:29:13

The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors.

5

CVE-2011-1359

  • EPSS 1.78%
  • Veröffentlicht 06.09.2011 15:55:02
  • Zuletzt bearbeitet 16.06.2026 23:29:12

Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, and 8.0 before 8.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

5.8

CVE-2011-1355

  • EPSS 1.87%
  • Veröffentlicht 19.07.2011 20:55:00
  • Zuletzt bearbeitet 16.06.2026 23:29:12

Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter.

2.1

CVE-2011-1356

  • EPSS 0.36%
  • Veröffentlicht 19.07.2011 20:55:00
  • Zuletzt bearbeitet 16.06.2026 23:29:12

IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request.

6.8

CVE-2010-3271

Exploit
  • EPSS 2.1%
  • Veröffentlicht 18.07.2011 22:55:00
  • Zuletzt bearbeitet 16.06.2026 23:22:29

Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administ...