Ibm

Websphere Application Server

519 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.6

CVE-2010-0777

  • EPSS 1.88%
  • Veröffentlicht 17.05.2010 22:30:01
  • Zuletzt bearbeitet 16.06.2026 23:16:49

The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote atta...

1.9

CVE-2010-1650

  • EPSS 0.3%
  • Veröffentlicht 03.05.2010 13:51:52
  • Zuletzt bearbeitet 16.06.2026 23:18:47

IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11, when the -trace option (aka debugging mode) is enabled, executes debugging statements that print string representations of unspecified obj...

1.9

CVE-2010-1651

  • EPSS 0.33%
  • Veröffentlicht 03.05.2010 13:51:52
  • Zuletzt bearbeitet 16.06.2026 23:18:47

IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full trace logging for SIP) are enabled, logs the entirety of all inbound and outbound SIP messages, which allows l...

4.3

CVE-2010-0768

  • EPSS 1.64%
  • Veröffentlicht 01.04.2010 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:16:48

Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote attackers to inject arbitrary web script or HTML via the U...

1.9

CVE-2010-0769

  • EPSS 0.28%
  • Veröffentlicht 01.04.2010 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:16:48

IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by readin...

4

CVE-2010-0770

  • EPSS 1.75%
  • Veröffentlicht 01.04.2010 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:16:48

IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service (ORB ListenerThread hang) by aborting an SSL handshake.

7.5

CVE-2010-1182

  • EPSS 1.61%
  • Veröffentlicht 29.03.2010 20:30:00
  • Zuletzt bearbeitet 16.06.2026 23:17:47

Multiple unspecified vulnerabilities in the administrative console in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.9 on z/OS have unknown impact and attack vectors.

5

CVE-2010-0563

  • EPSS 2.17%
  • Veröffentlicht 08.02.2010 21:30:00
  • Zuletzt bearbeitet 16.06.2026 23:16:24

The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network ...

6.4

CVE-2009-2749

  • EPSS 1.15%
  • Veröffentlicht 08.12.2009 17:30:00
  • Zuletzt bearbeitet 16.06.2026 23:10:09

Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value.

6.8

CVE-2009-2746

  • EPSS 0.6%
  • Veröffentlicht 16.11.2009 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:10:09

Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the...