Medium IBM WebSphere Application Server CVEs
252 CVEs, 15 protected by Waratek
Overview 252 matches · 15 protected · 0 exploited · 0 CISA KEV · 7 public PoC · 0 EPSS ≥ 0.5
Protected by Waratek
15
6.0%
Rule in development
0
0.0%
Mitigation candidate
7
2.8%
No exploit published
230
91.3%
blocked by ARMR today
15
6.0%
partly blocked
0
0.0%
not blocked
237
94.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
7
2.8%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
245
97.2%
split by
peak 23 / year
20001
Mitigation candidate1
Medium1
not blocked1
Working exploit published1
20013
Mitigation candidate1
No exploit published2
Medium3
not blocked3
Working exploit published1
No public exploit2
20021
No exploit published1
Medium1
not blocked1
No public exploit1
20030
20040
20057
Mitigation candidate1
No exploit published6
Medium7
not blocked7
Working exploit published1
No public exploit6
200610
Mitigation candidate1
No exploit published9
Medium10
not blocked10
Working exploit published1
No public exploit9
200710
Mitigation candidate1
No exploit published9
Medium10
not blocked10
Working exploit published1
No public exploit9
20085
No exploit published5
Medium5
not blocked5
No public exploit5
200921
Mitigation candidate1
No exploit published20
Medium21
not blocked21
Working exploit published1
No public exploit20
201020
No exploit published20
Medium20
not blocked20
No public exploit20
201123
Protected by Waratek1
Mitigation candidate1
No exploit published21
Medium23
blocked by ARMR today1
not blocked22
Working exploit published1
No public exploit22
201218
Protected by Waratek1
No exploit published17
Medium18
blocked by ARMR today1
not blocked17
No public exploit18
201315
Protected by Waratek1
No exploit published14
Medium15
blocked by ARMR today1
not blocked14
No public exploit15
201421
Protected by Waratek2
No exploit published19
Medium21
blocked by ARMR today2
not blocked19
No public exploit21
201510
No exploit published10
Medium10
not blocked10
No public exploit10
20166
No exploit published6
Medium6
not blocked6
No public exploit6
20175
No exploit published5
Medium5
not blocked5
No public exploit5
201811
Protected by Waratek2
No exploit published9
Medium11
blocked by ARMR today2
not blocked9
No public exploit11
201912
Protected by Waratek2
No exploit published10
Medium12
blocked by ARMR today2
not blocked10
No public exploit12
20209
Protected by Waratek2
No exploit published7
Medium9
blocked by ARMR today2
not blocked7
No public exploit9
20213
Protected by Waratek1
No exploit published2
Medium3
blocked by ARMR today1
not blocked2
No public exploit3
202212
No exploit published12
Medium12
not blocked12
No public exploit12
20234
No exploit published4
Medium4
not blocked4
No public exploit4
202411
Protected by Waratek2
No exploit published9
Medium11
blocked by ARMR today2
not blocked9
No public exploit11
20254
No exploit published4
Medium4
not blocked4
No public exploit4
202610
Protected by Waratek1
No exploit published9
Medium10
blocked by ARMR today1
not blocked9
No public exploit10
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2009-0906 | Medium | 2009-08-13 | No exploit published | No public exploit | The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors. |
| CVE-2009-0904 | Medium | 2009-07-05 | No exploit published | No public exploit | The IBM Stax XMLStreamWriter in the Web Services component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 does not properly process XML encoding, which allows remote attackers to bypass intended access restrictions and possibly modify data via "XML fuzzing attacks" sent through SOAP requests. |
| CVE-2009-1900 | Medium | 2009-06-03 | No exploit published | No public exploit | The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive information via unspecified use of the wsadmin scripting tool. |
| CVE-2009-1898 | Medium | 2009-06-03 | No exploit published | No public exploit | The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network. |
| CVE-2009-0899 | Medium | 2009-06-03 | No exploit published | No public exploit | IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console (ISC) 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager (WMM) to Virtual Member Manager (VMM) and a Federated Repository, which allows attackers to obtain sensitive information from repositories via unspecified vectors. |
| CVE-2009-0892 | Medium | 2009-03-31 | No exploit published | No public exploit | The administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3 allows attackers to hijack user sessions in "specific scenarios" related to a forced logout. |
| CVE-2009-0891 | Medium | 2009-03-25 | No exploit published | No public exploit | The Web Services Security component in IBM WebSphere Application Server 7.0 before Fix Pack 1 (7.0.0.1), 6.1 before Fix Pack 23 (6.1.0.23),and 6.0.2 before Fix Pack 33 (6.0.2.33) does not properly enforce (1) nonce and (2) timestamp expiration values in WS-Security bindings as stored in the com.ibm.wsspi.wssecurity.core custom property, which allows remote authenticated users to conduct session hijacking attacks. |
| CVE-2009-0856 | Medium | 2009-03-09 | No exploit published | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, and 6.1 before 6.1.0.23 on z/OS, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2009-0855 | Medium | 2009-03-09 | Mitigation candidate | Working exploit published | Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2009-0506 | Medium | 2009-02-25 | No exploit published | No public exploit | Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 Identity Assertion is enabled and Enterprise JavaBeans (EJB) interaction occurs between a WAS 6.1 instance and a WAS pre-6.1 instance, allows local users to have an unknown impact via vectors related to (1) use of the wrong subject and (2) multiple CBIND checks. |
| CVE-2008-4285 | Medium | 2009-02-17 | No exploit published | No public exploit | Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19, when a component statistic is enabled, allows attackers to cause a denial of service (daemon crash) via vectors related to "a gradual degradation in performance." |
| CVE-2009-0438 | Medium | 2009-02-10 | No exploit published | No public exploit | IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization checking" and obtain sensitive information from JSP pages via a crafted request. NOTE: this is probably a duplicate of CVE-2008-5412. |
| CVE-2009-0435 | Medium | 2009-02-10 | No exploit published | No public exploit | Unspecified vulnerability in the IBM Asynchronous I/O (aka AIO or libibmaio) library in the Java Message Service (JMS) component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.17 on AIX 5.3 allows attackers to cause a denial of service (daemon crash) via vectors related to the aio_getioev2 and getEvent methods. |
| CVE-2009-0432 | Medium | 2009-02-10 | No exploit published | No public exploit | The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors. |
| CVE-2008-4284 | Medium | 2009-02-10 | No exploit published | No public exploit | Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.x versions, 6.0.x before 6.0.2.33, and 6.1.x before 6.1.0.23 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage feature. |
| CVE-2008-5413 | Medium | 2008-12-10 | No exploit published | No public exploit | PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2009-0434. |
| CVE-2008-5411 | Medium | 2008-12-10 | No exploit published | No public exploit | IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier for remote attackers to obtain sensitive information by sniffing the network. |
| CVE-2008-4679 | Medium | 2008-10-22 | No exploit published | No public exploit | The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when Certificate Store Collections is configured to use Certificate Revocation Lists (CRL), does not call the setRevocationEnabled method on the PKIXBuilderParameters object, which prevents the "Java security method" from checking the revocation status of X.509 certificates and allows remote attackers to bypass intended access restrictions via a SOAP message with a revoked certificate. |
| CVE-2008-3236 | Medium | 2008-07-21 | No exploit published | No public exploit | Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to "previously encrypted properties" that are not encrypted. |
| CVE-2008-2550 | Medium | 2008-06-04 | No exploit published | No public exploit | Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header. |
| CVE-2007-5944 | Medium | 2007-11-14 | Mitigation candidate | Working exploit published | Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are insufficient details to be sure. |
| CVE-2007-5799 | Medium | 2007-11-03 | No exploit published | No public exploit | Multiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to perform some actions as WAS UDDI users via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters. |
| CVE-2007-5798 | Medium | 2007-11-03 | No exploit published | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to inject arbitrary web script or HTML via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters. |
| CVE-2007-4833 | Medium | 2007-09-12 | No exploit published | No public exploit | Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6.1.0.11) has unknown impact and attack vectors, aka PK44789. |
| CVE-2007-3397 | Medium | 2007-06-26 | No exploit published | No public exploit | The web container in IBM WebSphere Application Server (WAS) before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information. |
| CVE-2007-3265 | Medium | 2007-06-19 | No exploit published | No public exploit | Cross-site scripting (XSS) vulnerability in the Samples component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2007-1944 | Medium | 2007-04-11 | No exploit published | No public exploit | The Java Message Service (JMS) in IBM WebSphere Application Server (WAS) before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release [of] a bytebuffer input stream," possibly a double free vulnerability. |
| CVE-2006-7166 | Medium | 2007-03-20 | No exploit published | No public exploit | IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via "a specific JSP URL." |
| CVE-2006-7165 | Medium | 2007-03-20 | No exploit published | No public exploit | IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 allows remote attackers to obtain JSP source code and other sensitive information via certain "special URIs." |
| CVE-2006-7164 | Medium | 2007-03-20 | No exploit published | No public exploit | SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does not issue a security challenge, which allows remote attackers to read secure files and obtain sensitive information via certain requests. |
| CVE-2006-6637 | Medium | 2006-12-19 | No exploit published | No public exploit | The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests." |
| CVE-2006-4223 | Medium | 2006-08-18 | No exploit published | No public exploit | IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137. |
| CVE-2006-4222 | Medium | 2006-08-18 | No exploit published | No public exploit | Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by (2) PK22747, (3) PK24334, (4) PK25740, and (5) PK26123. |
| CVE-2006-4137 | Medium | 2006-08-14 | No exploit published | No public exploit | IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command line," and (3) traces. |
| CVE-2006-3231 | Medium | 2006-06-27 | No exploit published | No public exploit | Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters." |
| CVE-2006-2435 | Medium | 2006-05-17 | No exploit published | No public exploit | Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to "Inserting certain script tags in urls [that] may allow unintended execution of scripts." |
| CVE-2006-2434 | Medium | 2006-05-17 | No exploit published | No public exploit | Unspecified vulnerability in WebSphere 5.1.1 (or any earlier cumulative fix) Common Configuration Mode + CommonArchive and J2EE Models might allow attackers to obtain sensitive information via the trace. |
| CVE-2006-2431 | Medium | 2006-05-17 | Mitigation candidate | Working exploit published | Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page. NOTE: some sources have reported the element as "faultfactor," but this is likely erroneous. |
| CVE-2006-1619 | Medium | 2006-04-05 | No exploit published | No public exploit | IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a large header. |
| CVE-2006-1093 | Medium | 2006-03-09 | No exploit published | No public exploit | Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed. |
| CVE-2005-4834 | Medium | 2005-12-31 | No exploit published | No public exploit | IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container. |
| CVE-2005-4833 | Medium | 2005-12-31 | No exploit published | No public exploit | IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via "a specific JSP URL," related to lack of normalization of the URL format. |
| CVE-2005-4413 | Medium | 2005-12-20 | No exploit published | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remote attackers to inject arbitrary web script or HTML via the (1) E-mail address field to (a) PlantsByWebSphere/login.jsp, (2) message field to (b) TechnologySample/BulletinBoard Script, (3) Email address field to (c) TechnologySamples/Subscription, and the (4) Movie Name, (5) Movie Reviewer, and (6) Movie Review fields to (d) TechnologySamples/MovieReview2_1. |
| CVE-2005-3498 | Medium | 2005-11-04 | No exploit published | No public exploit | IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, records a full URL including the queryString in the trace logs when an application encodes a URL, which could allow attackers to obtain sensitive information. |
| CVE-2005-2091 | Medium | 2005-07-05 | No exploit published | No public exploit | IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebSphere to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling." |
| CVE-2005-1112 | Medium | 2005-05-02 | Mitigation candidate | Working exploit published | IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine. |
| CVE-2005-0425 | Medium | 2005-05-02 | No exploit published | No public exploit | Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine. |
| CVE-2002-1153 | Medium | 2002-10-11 | No exploit published | No public exploit | IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host". |
| CVE-2001-1189 | Medium | 2001-12-13 | No exploit published | No public exploit | IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script. |
| CVE-2001-0390 | Medium | 2001-07-02 | Mitigation candidate | Working exploit published | IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters. |
| CVE-2001-0389 | Medium | 2001-07-02 | No exploit published | No public exploit | IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument. |
| CVE-2000-0652 | Medium | 2000-07-24 | Mitigation candidate | Working exploit published | IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string. |