| CVE-2019-4030 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Mar 6, 2019 |
| CVE-2018-1996 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the…
|
5.3
Medium
|
Feb 19, 2019 |
| CVE-2018-1926 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site request forgery,…
|
4.3
Medium
|
Dec 12, 2018 |
| CVE-2018-1901 |
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain elevated privileges on…
|
5.0
Medium
|
Dec 12, 2018 |
| CVE-2018-1904 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code…
|
8.1
High
|
Dec 11, 2018 |
| CVE-2018-1957 |
IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by…
|
4.0
Medium
|
Dec 10, 2018 |
| CVE-2018-1840 |
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system,…
|
6.0
Medium
|
Dec 3, 2018 |
| CVE-2018-1905 |
IBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack…
|
7.1
High
|
Nov 26, 2018 |
| CVE-2018-1797 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local…
|
6.3
Medium
|
Nov 16, 2018 |
| CVE-2018-1643 |
The Installation Verification Tool of IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to…
|
6.1
Medium
|
Nov 15, 2018 |
| CVE-2018-1798 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Nov 12, 2018 |
| CVE-2018-1851 |
IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to execute arbitrary code on the…
|
7.3
High
|
Oct 31, 2018 |
| CVE-2018-1767 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Cachemonitor is vulnerable to cross-site scripting
|
6.1
Medium
|
Oct 29, 2018 |
| CVE-2018-1777 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Oct 16, 2018 |
| CVE-2018-1770 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the…
|
6.5
Medium
|
Oct 12, 2018 |
| CVE-2018-1838 |
IBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker to obtain sensitive…
|
5.3
Medium
|
Oct 12, 2018 |
| CVE-2018-1793 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using SAML ear is vulnerable to cross-site scripting
|
6.1
Medium
|
Oct 3, 2018 |
| CVE-2018-1794 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using OAuth ear is vulnerable to cross-site scripting
|
6.1
Medium
|
Oct 3, 2018 |
| CVE-2018-1683 |
IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the…
|
5.9
Medium
|
Sep 26, 2018 |
| CVE-2018-1719 |
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions
|
5.9
Medium
|
Sep 14, 2018 |
| CVE-2018-1567 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code…
|
9.8
Critical
|
Sep 7, 2018 |
| CVE-2018-1695 |
IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to…
|
7.3
High
|
Sep 6, 2018 |
| CVE-2018-1755 |
IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by…
|
5.9
Medium
|
Aug 24, 2018 |
| CVE-2018-1621 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in…
|
4.4
Medium
|
Jul 6, 2018 |
| CVE-2018-1614 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML responses from the SAML identity provider…
|
5.8
Medium
|
Jun 26, 2018 |