Show filters
118 Total Results
Displaying 61-70 of 118
Sort by:
Attacker Value
Unknown
CVE-2011-1322
Disclosure Date: March 08, 2011 (last updated October 04, 2023)
The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages.
0
Attacker Value
Unknown
CVE-2011-1307
Disclosure Date: March 08, 2011 (last updated October 04, 2023)
The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability than CVE-2009-1173.
0
Attacker Value
Unknown
CVE-2011-1310
Disclosure Date: March 08, 2011 (last updated October 04, 2023)
The Administrative Scripting Tools component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15, when tracing is enabled, places wsadmin command parameters into the (1) wsadmin.traceout and (2) trace.log files, which allows local users to obtain potentially sensitive information by reading these files.
0
Attacker Value
Unknown
CVE-2008-7274
Disclosure Date: February 15, 2011 (last updated October 04, 2023)
IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password.
0
Attacker Value
Unknown
CVE-2011-0316
Disclosure Date: January 12, 2011 (last updated October 04, 2023)
The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request.
0
Attacker Value
Unknown
CVE-2011-0315
Disclosure Date: January 12, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to the lack of an error page for an application.
0
Attacker Value
Unknown
CVE-2010-0785
Disclosure Date: November 09, 2010 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
0
Attacker Value
Unknown
CVE-2010-0783
Disclosure Date: November 09, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2010-3700
Disclosure Date: October 29, 2010 (last updated October 04, 2023)
VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.
0
Attacker Value
Unknown
CVE-2010-0781
Disclosure Date: September 21, 2010 (last updated October 04, 2023)
Unspecified vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted URL.
0
