Show filters
432 Total Results
Displaying 91-100 of 432
Sort by:
Attacker Value
Unknown
CVE-2019-4268
Disclosure Date: September 17, 2019 (last updated November 27, 2024)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 160201.
0
Attacker Value
Unknown
CVE-2019-4271
Disclosure Date: September 17, 2019 (last updated November 27, 2024)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin console is vulnerable to a Client-side HTTP parameter pollution vulnerability. IBM X-Force ID: 160243.
0
Attacker Value
Unknown
CVE-2019-4477
Disclosure Date: September 17, 2019 (last updated November 27, 2024)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information, caused by improper handling of command line options. IBM X-Force ID: 163997.
0
Attacker Value
Unknown
CVE-2019-4285
Disclosure Date: July 30, 2019 (last updated November 27, 2024)
IBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could send a specially-crafted HTTP request to hijack the victim's click actions or launch other client-side browser attacks. IBM X-Force ID: 160513.
0
Attacker Value
Unknown
CVE-2019-4269
Disclosure Date: June 28, 2019 (last updated November 27, 2024)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console could allow a remote attacker to obtain sensitive information when a specially crafted url causes a stack trace to be dumped. IBM X-Force ID: 160202.
0
Attacker Value
Unknown
CVE-2019-4279
Disclosure Date: May 17, 2019 (last updated December 06, 2023)
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 160445.
0
Attacker Value
Unknown
CVE-2019-4080
Disclosure Date: April 02, 2019 (last updated November 27, 2024)
IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380.
0
Attacker Value
Unknown
CVE-2019-4046
Disclosure Date: March 25, 2019 (last updated November 27, 2024)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by improper handling of request headers. A remote attacker could exploit this vulnerability to cause the consumption of Memory. IBM X-Force ID: 156242.
0
Attacker Value
Unknown
CVE-2018-1902
Disclosure Date: March 11, 2019 (last updated November 27, 2024)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof connection information which could be used to launch further attacks against the system. IBM X-Force ID: 152531.
0
Attacker Value
Unknown
CVE-2019-4030
Disclosure Date: March 06, 2019 (last updated November 27, 2024)
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155946.
0
