Ibm

Websphere Application Server

492 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2009-1899

  • EPSS 4.25%
  • Veröffentlicht 03.06.2009 17:00:00
  • Zuletzt bearbeitet 16.06.2026 23:08:19

Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5 on z/OS allows remote authent...

5

CVE-2009-1900

  • EPSS 1.77%
  • Veröffentlicht 03.06.2009 17:00:00
  • Zuletzt bearbeitet 16.06.2026 23:08:19

The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive informati...

10

CVE-2009-1901

  • EPSS 1.54%
  • Veröffentlicht 03.06.2009 17:00:00
  • Zuletzt bearbeitet 16.06.2026 23:08:19

The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits "non-standard http methods," which has unknown impact and remote attack vectors.

5.5

CVE-2009-0892

  • EPSS 1.35%
  • Veröffentlicht 31.03.2009 14:09:53
  • Zuletzt bearbeitet 16.06.2026 23:06:02

The administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3 allows attackers to hijack user sessions in "specific scenarios" related to a forced logout.

10

CVE-2009-1172

  • EPSS 1.83%
  • Veröffentlicht 31.03.2009 14:09:53
  • Zuletzt bearbeitet 16.06.2026 23:06:39

The JAX-RPC WS-Security runtime in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3, when APAR PK41002 is installed, does not properly validate UsernameToken objects, which has u...

2.1

CVE-2009-1173

  • EPSS 0.34%
  • Veröffentlicht 31.03.2009 14:09:53
  • Zuletzt bearbeitet 16.06.2026 23:06:39

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions we...

10

CVE-2009-1174

  • EPSS 2.36%
  • Veröffentlicht 31.03.2009 14:09:53
  • Zuletzt bearbeitet 16.06.2026 23:06:39

The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified "security problem" in the XML digital-signature specification, which has unknown impact and attack vectors.

5.5

CVE-2009-0891

  • EPSS 1.76%
  • Veröffentlicht 25.03.2009 01:30:00
  • Zuletzt bearbeitet 16.06.2026 23:06:02

The Web Services Security component in IBM WebSphere Application Server 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23),and 6.0.2 before Fix Pack 33 (6.0.2.33) does not properly enforce (1) nonce and (2) timestamp expiration values...

7.5

CVE-2009-0508

  • EPSS 2.92%
  • Veröffentlicht 16.03.2009 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:05:11

The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in...

4.3

CVE-2009-0855

  • EPSS 5.98%
  • Veröffentlicht 09.03.2009 21:30:00
  • Zuletzt bearbeitet 16.06.2026 23:05:58

Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.