Skip to contentIbm Websphere vulnerabilities
- ibm websphere portalIBM WebSphere Portal 8.0.0.1 before CF09 does not properly handle references in compute="always"...CVE-2013-67235.0 Medium
- ibm websphere portalCross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere...CVE-2013-63284.3 Medium
- ibm websphere portalIBM WebSphere Portal 7.0.0.x before 7.0.0.2 CF26 and 8.0.0.x before 8.0.0.1 CF09 does not...CVE-2013-63164.3 Medium
- ibm websphere portalIBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does...CVE-2013-40124.9 Medium
- ibm websphere service registry and repositoryCross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR)...CVE-2013-67213.5 Low
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-54183.5 Low
- ibm websphere application serverCross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0...CVE-2013-54174.3 Medium
- ibm websphere application serverThe migration functionality in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0...CVE-2013-54143.5 Low
- ibm websphere application serverIBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions...CVE-2013-40064.3 Medium
- ibm websphere portalIBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27,...CVE-2013-54544.3 Medium
- ibm websphere virtual enterpriseCross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual...CVE-2013-54253.5 Low
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x...CVE-2013-53793.5 Low
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows...CVE-2013-53783.5 Low
- ibm websphere datapower xc10 appliance, websphere datapower xc10 appliance firmware +1 moreThe console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process...CVE-2013-544610.0 High
- ibm websphere datapower xc10 appliance, websphere datapower xc10 appliance firmware +1 moreIBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all...CVE-2013-54287.1 High
- ibm websphere message brokerThe XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0...CVE-2013-53724.3 Medium
- ibm websphere extreme scaleThe monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows...CVE-2013-53944.9 Medium
- ibm websphere extreme scaleThe monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not...CVE-2013-53937.5 High
- ibm websphere extreme scaleCross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale...CVE-2013-53903.5 Low
- ibm websphere datapower xc10 appliance firmwareUnspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1...CVE-2013-540310.0 High
- ibm websphere application server, websphere application server feature pack for web services +1 moreThe WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0...CVE-2013-40536.8 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the UDDI Administrative console in IBM WebSphere...CVE-2013-40524.3 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-05964.3 Medium
- ibm websphere commerceThe Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term...CVE-2013-29924.3 Medium
- ibm websphere extended deployment compute gridIBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated...CVE-2013-40394.0 Medium
- ibm websphere commerceMultiple cross-site scripting (XSS) vulnerabilities in the (1) Accelerator JSPs, (2) Organization...CVE-2013-05664.3 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-40053.5 Low
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-40043.5 Low
- ibm websphere application serverCross-site request forgery (CSRF) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-30296.8 Medium
- ibm websphere application serverThe Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0...CVE-2013-29761.9 Low
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-29674.3 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0...CVE-2013-05973.5 Low
- ibm websphere portalIBM WebSphere Portal 6.1, 7.0, and 8.0 allows remote attackers to access the user directory via a...CVE-2013-30165.0 Medium
- ibm websphere portalMultiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07...CVE-2013-05874.3 Medium
- ibm websphere commerceIBM WebSphere Commerce 7.0 Feature Pack 4 and Feature Pack 5 incorrectly maintains a valid...CVE-2013-29946.4 Medium
- ibm websphere commerceIBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.7 does not properly perform...CVE-2013-29935.8 Medium
- apache geronimo, ibm websphere application server +1 moreApache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.1CVE-2013-1777Fix available10.0 High
- ibm websphere mqMultiple buffer overflows in mqm programs in IBM WebSphere MQ 7.0.x before 7.0.1.11, 7.1.x before...CVE-2013-30284.6 Medium
- ibm websphere commerceIBM WebSphere Commerce Enterprise 5.6.x through 5.6.1.5, 6.0.x through 6.0.0.11, and 7.0.x...CVE-2013-05234.3 Medium
- ibm websphere portalCRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before...CVE-2013-29503.5 Low
- ibm websphere portalCross-site scripting (XSS) vulnerability in the Web Content Manager - Web Content Viewer Portlet...CVE-2013-05494.3 Medium
- ibm websphere application server, websphere message broker +1 moreIBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 through 8...CVE-2013-04824.3 Medium
- ibm websphere datapower b2b appliance xb62, websphere datapower b2b appliance xb62 firmware, websphere datapower integration appliance xi50 +11 more +13 moreCross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA...CVE-2013-04994.3 Medium
- ibm websphere datapower xc10 appliance, websphere datapower xc10 appliance firmware +1 moreUnspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2...CVE-2013-06009.3 High
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in...CVE-2013-05654.3 Medium
- ibm websphere application serverDirectory traversal vulnerability in the Administrative Console in IBM WebSphere Application...CVE-2013-05444.0 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0...CVE-2013-05436.8 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-05424.3 Medium
- ibm websphere application serverBuffer overflow in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0...CVE-2013-05411.9 Low
- ibm websphere application serverIBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not...CVE-2013-05403.5 Low
- Show moreLoading…