| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-3106 | 5.0 |
The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37 does not properly implement security constraints on the (1) doGet and (2) doTrace methods, which allows remote attackers to bypass intended acc
|
17-08-2017 - 01:31 | 08-09-2009 - 22:30 | |
| CVE-2009-1898 | 5.0 |
The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the co
|
17-08-2017 - 01:30 | 03-06-2009 - 17:00 | |
| CVE-2009-1900 | 5.0 |
The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive informati
|
17-08-2017 - 01:30 | 03-06-2009 - 17:00 | |
| CVE-2009-1899 | 10.0 |
Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5 on z/OS allows remote authent
|
17-08-2017 - 01:30 | 03-06-2009 - 17:00 | |
| CVE-2009-1901 | 10.0 |
The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits "non-standard http methods," which has unknown impact and remote attack vectors.
|
17-08-2017 - 01:30 | 03-06-2009 - 17:00 | |
| CVE-2009-0891 | 5.5 |
The Web Services Security component in IBM WebSphere Application Server 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23),and 6.0.2 before Fix Pack 33 (6.0.2.33) does not properly enforce (1) nonce and (2) timestamp expiration values
|
17-08-2017 - 01:30 | 25-03-2009 - 01:30 | |
| CVE-2009-0506 | 6.2 |
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 Identity Assertion is enabled and Enterprise JavaBeans (EJB) interaction occurs between a WAS 6.1 instance and a WAS pre-6.1 instanc
|
08-08-2017 - 01:33 | 25-02-2009 - 16:30 | |
| CVE-2009-0508 | 7.5 |
The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in
|
08-08-2017 - 01:33 | 16-03-2009 - 19:30 | |
| CVE-2008-4111 | 9.3 |
Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors.
|
08-08-2017 - 01:32 | 16-09-2008 - 23:00 | |
| CVE-2008-4678 | 7.8 |
The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 allows remote attackers to cause a denial of service (controller 0C4 abend and application hang) via a long HTTP Host heade
|
08-08-2017 - 01:32 | 22-10-2008 - 18:00 | |
| CVE-2008-4679 | 6.8 |
The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when Certificate Store Collections is configured to use Certificate Revocation Lists (CRL), does not call the setRevocationEn
|
08-08-2017 - 01:32 | 22-10-2008 - 18:00 | |
| CVE-2009-1174 | 10.0 |
The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified "security problem" in the XML digital-signature specification, which has unknown impact and attack vectors.
|
07-09-2016 - 15:27 | 31-03-2009 - 14:09 | |
| CVE-2009-0856 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, and 6.1 before 6.1.0.23 on z/OS, allow remote attackers to inject arbitrary web script or HTML via unspecified
|
05-06-2009 - 04:00 | 09-03-2009 - 21:30 |