Skip to contentIbm Websphere vulnerabilities
- ibm websphere commerceSQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote...CVE-2010-26356.5 Medium
- ibm websphere application serverThe Web Services Security component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13...CVE-2010-07865.0 Medium
- ibm websphere application serverCross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere...CVE-2010-07856.0 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere...CVE-2010-07844.3 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere...CVE-2010-07834.3 Medium
- ibm websphere application server, vmware springsource spring security, acegisecurity acegi-security +2 moreAuthentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi SecurityCVE-2010-3700Fix available5.0 Medium
- ibm websphere mqIBM WebSphere MQ 6.x before 6.0.2.10 and 7.x before 7.0.1.3 allows remote attackers to spoof X...CVE-2010-07824.3 Medium
- ibm websphere application serverUnspecified vulnerability in the administrative console in IBM WebSphere Application Server (WAS)...CVE-2010-07814.0 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server...CVE-2010-318610.0 High
- ibm websphere service registry and repositoryMultiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and...CVE-2010-29854.3 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere...CVE-2010-07794.3 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere...CVE-2010-07784.3 Medium
- ibm websphere ilog jrulesMultiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere...CVE-2010-2433Public exploit4.3 Medium
- ibm websphere application serverThe HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote...CVE-2010-23285.0 Medium
- ibm websphere application servermod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11,...CVE-2010-23274.3 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during...CVE-2010-23264.3 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere...CVE-2010-23254.3 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform...CVE-2010-23247.5 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to...CVE-2010-23235.0 Medium
- ibm websphere application serverThe Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0...CVE-2010-07772.6 Low
- ibm websphere application serverThe Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0...CVE-2010-07765.0 Medium
- ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1...CVE-2010-07755.0 Medium
- ibm websphere application serverThe (1) JAX-RPC WS-Security 1.0 and (2) JAX-WS runtime implementations in IBM WebSphere...CVE-2010-07744.3 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when...CVE-2010-16511.9 Low
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x...CVE-2010-16501.9 Low
- ibm websphere datapower xml accelerator xa35, websphere datapower b2b appliance xb60, websphere datapower datapower integration appliance xi50 +2 more +4 moreThe IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration...CVE-2010-16125.0 Medium
- ibm websphere mqUnspecified vulnerability in the channel process in IBM WebSphere MQ 7.0 before 7.0.1.2 allows...CVE-2010-07724.0 Medium
- ibm websphere portalUnspecified vulnerability in the login process in IBM WebSphere Portal 6.0.1.1, and 6.1.0.x...CVE-2010-13487.5 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7...CVE-2010-07704.0 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7...CVE-2010-07691.9 Low
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere...CVE-2010-07684.3 Medium
- ibm websphere application serverMultiple unspecified vulnerabilities in the administrative console in IBM WebSphere Application...CVE-2010-11827.5 High
- apache http server, broadcom vmware ace management server, ibm websphere application server +2 moremodules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2...CVE-2010-0425Public exploitEPSS 94.2%10.0 High
- ibm lotus quickr, lotus web content management, lotus workplace web content management +1 more +3 moreOpen redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content...CVE-2010-07156.8 Medium
- ibm lotus quickr, lotus web content management, lotus workplace web content management +1 more +3 moreCross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web...CVE-2010-0714Public exploit4.3 Medium
- ibm websphere portalCross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5...CVE-2010-07044.3 Medium
- ibm websphere application serverThe Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through...CVE-2010-05635.0 Medium
- ibm websphere commerceIBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier...CVE-2009-27521.5 Low
- ibm websphere commerceIBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant...CVE-2009-27514.3 Medium
- ibm websphere service registry and repositoryIBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended...CVE-2009-27505.5 Medium
- ibm communications enabled applications, websphere application server +1 moreFeature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere...CVE-2009-27496.4 Medium
- ibm websphere portalUnspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x before 6.1.0.3...CVE-2009-41537.5 High
- ibm websphere portalCross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6...CVE-2009-41524.3 Medium
- ibm rational application developer for websphere, rational software architect +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM...CVE-2009-40524.3 Medium
- ibm websphere application serverCross-site request forgery (CSRF) vulnerability in the administrative console in the Security...CVE-2009-27466.8 Medium
- ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows...CVE-2009-27447.8 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not...CVE-2009-27432.1 Low
- ibm websphere application serverCross-site scripting (XSS) vulnerability in Eclipse Help in IBM WebSphere Application Server (WAS...CVE-2009-27424.3 Medium
- ibm websphere business eventsUnspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere...CVE-2009-274110.0 High
- ibm websphere mqThe server in IBM WebSphere MQ 7.0.0.1, 7.0.0.2, and 7.0.1.0 allows attackers to cause a denial...CVE-2009-31617.8 High
- Show moreLoading…