Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm websphere application server 8.0 vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv3
CVE-2017-1743
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote malicious user to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could browse the file system. IBM X-Force ID: 134933.
Ibm Websphere Application Server 7.0
Ibm Websphere Application Server 8.5
Ibm Websphere Application Server 9.0
Ibm Websphere Application Server 8.0
4.3
CVSSv3
CVE-2017-1741
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote malicious user to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could read files on the file system. IBM X-Force ID: 134931.
Ibm Websphere Application Server 7.0
Ibm Websphere Application Server 8.0
Ibm Websphere Application Server 8.5
Ibm Websphere Application Server 9.0
4.3
CVSSv3
CVE-2016-0377
The Administrative Console in IBM WebSphere Application Server (WAS) 7.x prior to 7.0.0.43, 8.0.x prior to 8.0.0.13, and 8.5.x prior to 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Ibm Websphere Application Server 7.0.0.40
Ibm Websphere Application Server 8.5.5.9
Ibm Websphere Application Server 8.5.5.1
Ibm Websphere Application Server 8.5.5.0
Ibm Websphere Application Server 8.0.0.2
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 8.0.0.1
Ibm Websphere Application Server 8.0.0.0
Ibm Websphere Application Server 7.0.0.16
Ibm Websphere Application Server 7.0.0.17
Ibm Websphere Application Server 7.0.0.24
Ibm Websphere Application Server 7.0.0.25
Ibm Websphere Application Server 7.0.0.33
Ibm Websphere Application Server 7.0.0.34
Ibm Websphere Application Server 7.0.0.6
Ibm Websphere Application Server 7.0.0.7
Ibm Websphere Application Server 8.5.5.6
Ibm Websphere Application Server 8.5.5.5
Ibm Websphere Application Server 7.0.0.42
Ibm Websphere Application Server 7.0.0.41
Ibm Websphere Application Server 8.5.5.4
Ibm Websphere Application Server 8.5.5.3
3.7
CVSSv3
CVE-2016-2960
IBM WebSphere Application Server (WAS) 7.x prior to 7.0.0.43, 8.0.0.x prior to 8.0.0.13, 8.5.0.x prior to 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x prior to 9.0.0.1 allows remote malicious users to cause a denial of service via crafted S...
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 8.5.0.0
Ibm Websphere Application Server 8.0.0.9
Ibm Websphere Application Server 8.0.0.12
Ibm Websphere Application Server 8.0.0.11
Ibm Websphere Application Server 7.0.0.8
Ibm Websphere Application Server 7.0.0.7
Ibm Websphere Application Server 7.0.0.36
Ibm Websphere Application Server 7.0.0.35
Ibm Websphere Application Server 7.0.0.27
Ibm Websphere Application Server 7.0.0.25
Ibm Websphere Application Server 7.0.0.18
Ibm Websphere Application Server 7.0.0.17
Ibm Websphere Application Server 7.0.0.10
Ibm Websphere Application Server 7.0.0.1
Ibm Websphere Application Server 8.5.5.0
Ibm Websphere Application Server 8.5.5.1
Ibm Websphere Application Server 8.5.5.5
Ibm Websphere Application Server 8.5.5.4
Ibm Websphere Application Server 8.0.0.4
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 8.0.0.2
3.5
CVSSv3
CVE-2019-4271
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin console is vulnerable to a Client-side HTTP parameter pollution vulnerability. IBM X-Force ID: 160243.
Ibm Websphere Application Server 7.0.0.0
Ibm Websphere Application Server
3.3
CVSSv3
CVE-2020-4629
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed technical error message. This information could be used in further attacks against the system. IBM X-Force ID: 185370.
Ibm Websphere Application Server
3.3
CVSSv3
CVE-2017-1381
IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and could allow a local malicious user to obtain sensitive information, caused by stale data being cached and then served. IBM X-Force ID: 127152.
Ibm Websphere Application Server
3.1
CVSSv3
CVE-2016-0385
Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 prior to 7.0.0.43, 8.0 prior to 8.0.0.13, 8.5 prior to 8.5.5.10, 9.0 prior to 9.0.0.1, and Liberty prior to 16.0.0.3, when HttpSessionIdReuse is enabled, allows remote authenticated users to obtain sensitive informatio...
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 8.5.0.0
Ibm Websphere Application Server 8.0.0.9
Ibm Websphere Application Server 8.0.0.2
Ibm Websphere Application Server 8.0.0.12
Ibm Websphere Application Server 7.0.0.8
Ibm Websphere Application Server 7.0.0.7
Ibm Websphere Application Server 7.0.0.36
Ibm Websphere Application Server 7.0.0.35
Ibm Websphere Application Server 7.0.0.28
Ibm Websphere Application Server 7.0.0.27
Ibm Websphere Application Server 7.0.0.18
Ibm Websphere Application Server 7.0.0.17
Ibm Websphere Application Server 7.0.0.10
Ibm Websphere Application Server 7.0.0.1
Ibm Websphere Application Server 8.5.5.0
Ibm Websphere Application Server 8.5.5.1
Ibm Websphere Application Server 8.5.5.5
Ibm Websphere Application Server 8.5.5.4
Ibm Websphere Application Server 8.0.0.4
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 7.0.0.39
NA
CVE-2015-5004
The Edge Component Caching Proxy in IBM WebSphere Application Server (WAS) 8.0 prior to 8.0.0.12 and 8.5 prior to 8.5.5.8 does not properly encrypt data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Ibm Websphere Application Server 8.0.0.4
Ibm Websphere Application Server 8.5.0.0
Ibm Websphere Application Server 8.5.5.1
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 8.5.5.6
Ibm Websphere Application Server 8.5.5.7
Ibm Websphere Application Server 8.0.0.2
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 8.5.5.0
Ibm Websphere Application Server 8.0.0.8
Ibm Websphere Application Server 8.5.5.4
Ibm Websphere Application Server 8.5.5.5
Ibm Websphere Application Server 8.5.0.1
Ibm Websphere Application Server 8.0.0.5
Ibm Websphere Application Server 8.0.0.6
Ibm Websphere Application Server 8.0.0.9
Ibm Websphere Application Server 8.5.5.3
Ibm Websphere Application Server 8.0.0.0
Ibm Websphere Application Server 8.0.0.1
Ibm Websphere Application Server 8.5.0.2
Ibm Websphere Application Server 8.0.0.7
Ibm Websphere Application Server 8.0.0.11
NA
CVE-2015-2017
CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 6.1 up to and including 6.1.0.47, 7.0 prior to 7.0.0.39, 8.0 prior to 8.0.0.12, and 8.5 prior to 8.5.5.8 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attac...
Ibm Websphere Application Server 6.1.0.0
Ibm Websphere Application Server 6.1.0.1
Ibm Websphere Application Server 6.1.0.19
Ibm Websphere Application Server 6.1.0.2
Ibm Websphere Application Server 6.1.0.31
Ibm Websphere Application Server 6.1.0.33
Ibm Websphere Application Server 6.1.0.35
Ibm Websphere Application Server 6.1.0.5
Ibm Websphere Application Server 6.1.0.7
Ibm Websphere Application Server 7.0.0.13
Ibm Websphere Application Server 7.0.0.14
Ibm Websphere Application Server 7.0.0.22
Ibm Websphere Application Server 7.0.0.23
Ibm Websphere Application Server 7.0.0.32
Ibm Websphere Application Server 7.0.0.33
Ibm Websphere Application Server 7.0.0.6
Ibm Websphere Application Server 7.0.0.7
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 8.0.0.4
Ibm Websphere Application Server 8.5.5.1
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 6.1.0.13
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5324
path traversal
CVE-2024-4743
CVE-2024-5184
TCP
CVE-2024-27822
code injection
CVE-2024-28995
CVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »