Skip to content
OpenAdvisories
High WID-SEC-2026-4428 3 CVEs

IBM WebSphere Service Registry and Repository: Mehrere Schwachstellen

Published Apr 19, 2021 · Updated Nov 9, 2026 · Revision 2 · de

Vendor: IBM Product: WebSphere Service Registry and Repository Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM WebSphere Service Registry and Repository ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuführen.

Product

IBM WebSphere Service Registry and Repository ist ein Tool zur Optimierung und Verwaltung einer serviceorientierten Architektur (SOA).

Vulnerabilities 3

  • High 7.7
    CVE-2020-5258

    Prototype pollution in dojo

    In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulat…

    dojo dojo dojo dojo Debian Ubuntu npm
  • Medium 4.3
    CVE-2021-20480

    IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a sp…

    IBM WebSphere Application Server
  • High —
    CVE-2021-26296

    Cross-Site Request Forgery (CSRF) vulnerability in Apache MyFaces

    In the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, and 3.0.0-RC1 use cryptographically weak implicit and explicit cross-site request forgery (CSRF) tokens. Due to that limitation, it is poss…

    Apache Software Foundation Apache MyFaces Core org.apache.myfaces.core:myfaces-core-module Maven

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References