Skip to content
OpenAdvisories

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und vertrauliche Informationen offenzulegen.

Product

IBM WebSphere Application Server ist ein J2EE-Applikationsserver.

Vulnerabilities 3

  • Critical 9.3

    IBM WebSphere Application Server is affected by a cross-site scripting vulnerability

    IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system.

  • Critical 9.3

    IBM WebSphere Application Server is affected by a cross-site scripting vulnerability

    IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system.

  • Medium 4.3

    IBM WebSphere Application Server is affected by a Path Traversal vulnerability

    IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system.

Revision history

  1. #7

    Neue Updates von IBM aufgenommen

  2. #6

    Neue Updates von IBM aufgenommen

  3. #5

    Neue Updates von IBM aufgenommen

  4. #4

    Neue Updates von IBM aufgenommen

  5. #3

    Neue Updates von IBM aufgenommen

  6. #2

    Neue Updates von IBM aufgenommen

  7. #1

    Initiale Fassung

References