Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2006-3231
Disclosure Date: June 27, 2006 (last updated October 04, 2023)
Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."
0
Attacker Value
Unknown
CVE-2001-1189
Disclosure Date: December 13, 2001 (last updated February 22, 2025)
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.
0
Attacker Value
Unknown
CVE-2001-0824
Disclosure Date: December 06, 2001 (last updated February 22, 2025)
Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.
0
Attacker Value
Unknown
CVE-2001-0122
Disclosure Date: March 13, 2001 (last updated February 22, 2025)
Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error.
0
