Ibm

Websphere

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-33142

  • EPSS 0.05%
  • Veröffentlicht 14.08.2025 15:41:59
  • Zuletzt bearbeitet 18.08.2025 18:05:01

IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections.

5.4

CVE-2024-28775

  • EPSS 0.11%
  • Veröffentlicht 01.05.2024 13:15:51
  • Zuletzt bearbeitet 11.04.2025 14:09:38

IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tru...

6.1

CVE-2018-1848

  • EPSS 0.24%
  • Veröffentlicht 14.12.2018 16:29:00
  • Zuletzt bearbeitet 21.11.2024 04:00:29

IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

3.3

CVE-2017-1756

  • EPSS 0.05%
  • Veröffentlicht 30.03.2018 16:29:00
  • Zuletzt bearbeitet 21.11.2024 03:22:19

IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.

6.8

CVE-2016-9693

  • EPSS 0.18%
  • Veröffentlicht 07.03.2017 17:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cause an unauthenticated victim to download a malicious payload. An existing file type restriction can b...

4

CVE-2015-1884

  • EPSS 0.81%
  • Veröffentlicht 28.06.2015 14:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Directory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2 through 7.2.0.5 allows remote authenticate...

3.5

CVE-2015-0193

  • EPSS 0.2%
  • Veröffentlicht 30.05.2015 19:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote authenticated users to inj...

3.5

CVE-2015-0156

  • EPSS 0.23%
  • Veröffentlicht 25.05.2015 14:59:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.6.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote authenticated users to inj...

10

CVE-1999-0944

  • EPSS 1.54%
  • Veröffentlicht 24.10.1999 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections.