Total
5 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2010-2325 | 1 Ibm | 2 Websphere Application Server, Zos | 2024-11-21 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection." | |||||
CVE-2010-2324 | 1 Ibm | 2 Websphere Application Server, Zos | 2024-11-21 | 7.5 HIGH | N/A |
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link injection" actions via unknown vectors. | |||||
CVE-2010-2323 | 1 Ibm | 2 Websphere Application Server, Zos | 2024-11-21 | 5.0 MEDIUM | N/A |
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creation by the BBOWWPFx job and the zPMT. | |||||
CVE-2010-1182 | 1 Ibm | 2 Websphere Application Server, Zos | 2024-11-21 | 7.5 HIGH | N/A |
Multiple unspecified vulnerabilities in the administrative console in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.9 on z/OS have unknown impact and attack vectors. | |||||
CVE-2009-0391 | 1 Ibm | 2 Websphere Application Server, Zos | 2024-11-21 | 7.8 HIGH | N/A |
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0.1 on z/OS allows attackers to read arbitrary files via unknown vectors. |