Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2010-3700
Disclosure Date: October 29, 2010 (last updated October 04, 2023)
VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.
0
Attacker Value
Unknown
CVE-2006-3232
Disclosure Date: June 27, 2006 (last updated October 04, 2023)
Unspecified vulnerability in IBM WebSphere Application Server before 6.0.2.11 has unknown impact and attack vectors because the "UserNameToken cache was improperly used."
0
Attacker Value
Unknown
CVE-2006-3231
Disclosure Date: June 27, 2006 (last updated October 04, 2023)
Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."
0
Attacker Value
Unknown
CVE-2001-0390
Disclosure Date: July 02, 2001 (last updated February 22, 2025)
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.
0
Attacker Value
Unknown
CVE-2000-0652
Disclosure Date: July 24, 2000 (last updated February 22, 2025)
IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.
0
