Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm websphere application server 8.5.5.7 vulnerabilities and exploits
(subscribe to this query)
801
VMScore
CVE-2015-4947
Stack-based buffer overflow in the Administration Server in IBM HTTP Server 6.1.0.x up to and including 6.1.0.47, 7.0.0.x prior to 7.0.0.39, 8.0.0.x prior to 8.0.0.12, and 8.5.x prior to 8.5.5.7, as used in WebSphere Application Server and other products, allows remote authentica...
Ibm Http Server
578
VMScore
CVE-2016-5983
IBM WebSphere Application Server (WAS) 7.0 prior to 7.0.0.43, 8.0 prior to 8.0.0.13, 8.5 prior to 8.5.5.11, 9.0 prior to 9.0.0.2, and Liberty prior to 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.
Ibm Websphere Application Server 8.5.0.0
Ibm Websphere Application Server 8.5.5.9
Ibm Websphere Application Server 8.0.0.9
Ibm Websphere Application Server 8.0.0.8
Ibm Websphere Application Server 8.0.0.11
Ibm Websphere Application Server 8.0.0.10
Ibm Websphere Application Server 7.0.0.7
Ibm Websphere Application Server 7.0.0.6
Ibm Websphere Application Server 7.0.0.35
Ibm Websphere Application Server 7.0.0.34
Ibm Websphere Application Server 7.0.0.25
Ibm Websphere Application Server 7.0.0.24
Ibm Websphere Application Server 7.0.0.17
Ibm Websphere Application Server 7.0.0.16
Ibm Websphere Application Server 7.0.0.1
Ibm Websphere Application Server 7.0.0.0
Ibm Websphere Application Server 8.5.5.1
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 8.5.5.4
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 8.0.0.2
Ibm Websphere Application Server 8.0.0.12
1 Github repository
445
VMScore
CVE-2016-9879
An issue exists in Pivotal Spring Security prior to 3.2.10, 4.1.x prior to 4.1.4, and 4.2.x prior to 4.2.1. Spring Security does not consider URL path parameters when processing security constraints. By adding a URL path parameter with an encoded "/" to a request, an at...
Vmware Spring Security 4.1.3
Vmware Spring Security 4.1.2
Vmware Spring Security 3.2.5
Vmware Spring Security 3.2.4
Vmware Spring Security 4.1.1
Vmware Spring Security 4.1.0
Vmware Spring Security 3.2.3
Vmware Spring Security 3.2.2
Vmware Spring Security 3.2.7
Vmware Spring Security 3.2.6
Vmware Spring Security 4.2.0
Vmware Spring Security 3.2.9
Vmware Spring Security 3.2.8
Vmware Spring Security 3.2.1
Vmware Spring Security 3.2.0
Ibm Websphere Application Server 8.5.5.6
Ibm Websphere Application Server 8.5.5.5
Ibm Websphere Application Server 8.5.5.4
Ibm Websphere Application Server 8.5.5.3
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 8.5.5.9
Ibm Websphere Application Server 8.5.5.1
445
VMScore
CVE-2016-5986
IBM WebSphere Application Server (WAS) 7.x prior to 7.0.0.43, 8.0.x prior to 8.0.0.13, 8.5.x prior to 8.5.5.11, 9.0.x prior to 9.0.0.2, and Liberty prior to 16.0.0.3 mishandles responses, which allows remote malicious users to obtain sensitive information via unspecified vectors.
Ibm Websphere Application Server 8.5.0.2
Ibm Websphere Application Server 8.5.5.0
Ibm Websphere Application Server 8.5.5.5
Ibm Websphere Application Server 8.5.5.4
Ibm Websphere Application Server 8.0.0.4
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 8.0
Ibm Websphere Application Server 7.0.0.39
Ibm Websphere Application Server 7.0.0.38
Ibm Websphere Application Server 7.0.0.37
Ibm Websphere Application Server 7.0.0.3
Ibm Websphere Application Server 7.0.0.29
Ibm Websphere Application Server 7.0.0.21
Ibm Websphere Application Server 7.0.0.2
Ibm Websphere Application Server 7.0.0.12
Ibm Websphere Application Server 7.0.0.11
Ibm Websphere Application Server 8.5.5.1
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 8.5.0.0
Ibm Websphere Application Server 8.0.0.9
Ibm Websphere Application Server 8.0.0.2
Ibm Websphere Application Server 8.0.0.12
445
VMScore
CVE-2016-2923
IBM WebSphere Application Server (WAS) 8.5 up to and including 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified JAX-RS API cookie, which makes it easier for remote malicious users to obtain potentially s...
Ibm Websphere Application Server 8.5.5.9
Ibm Websphere Application Server 8.5.5.8
Ibm Websphere Application Server 8.5.5.1
Ibm Websphere Application Server 8.5.5.0
Ibm Websphere Application Server 8.5.5.3
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 8.5.5.7
Ibm Websphere Application Server 8.5.5.6
Ibm Websphere Application Server 8.5.5.5
Ibm Websphere Application Server 8.5.5.4
445
VMScore
CVE-2016-0389
Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 up to and including 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote malicious users to obtain sensitive information via unspecified vectors.
Ibm Websphere Application Server 8.5.5.9
Ibm Websphere Application Server 8.5.5.8
Ibm Websphere Application Server 8.5.5.3
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 8.5.5.7
Ibm Websphere Application Server 8.5.5.6
Ibm Websphere Application Server 8.5.5.5
Ibm Websphere Application Server 8.5.5.4
445
VMScore
CVE-2015-1932
IBM WebSphere Application Server 7.x prior to 7.0.0.39, 8.0.x prior to 8.0.0.11, and 8.5.x prior to 8.5.5.7 and WebSphere Virtual Enterprise prior to 7.0.0.7 allow remote malicious users to obtain potentially sensitive information about the proxy-server software by reading the HT...
Ibm Websphere Virtual Enterprise
Ibm Websphere Application Server 7.0.0.11
Ibm Websphere Application Server 7.0.0.12
Ibm Websphere Application Server 7.0.0.13
Ibm Websphere Application Server 7.0.0.14
Ibm Websphere Application Server 7.0.0.21
Ibm Websphere Application Server 7.0.0.22
Ibm Websphere Application Server 7.0.0.31
Ibm Websphere Application Server 7.0.0.32
Ibm Websphere Application Server 7.0.0.6
Ibm Websphere Application Server 7.0.0.7
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 8.0.0.4
Ibm Websphere Application Server 8.5.0.1
Ibm Websphere Application Server 8.5.0.2
Ibm Websphere Application Server 7.0.0.15
Ibm Websphere Application Server 7.0.0.16
Ibm Websphere Application Server 7.0.0.23
Ibm Websphere Application Server 7.0.0.24
Ibm Websphere Application Server 7.0.0.33
Ibm Websphere Application Server 7.0.0.34
Ibm Websphere Application Server 7.0.0.8
445
VMScore
CVE-2015-4938
IBM WebSphere Application Server 7.x prior to 7.0.0.39, 8.0.x prior to 8.0.0.11, and 8.5.x prior to 8.5.5.7 allows remote malicious users to spoof servlets and obtain sensitive information via unspecified vectors.
Ibm Websphere Application Server 8.5.5.1
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 8.5.5.3
Ibm Websphere Application Server 8.0.0.0
Ibm Websphere Application Server 8.0.0.1
Ibm Websphere Application Server 8.0.0.7
Ibm Websphere Application Server 8.0.0.8
Ibm Websphere Application Server 7.0.0.15
Ibm Websphere Application Server 7.0.0.16
Ibm Websphere Application Server 7.0.0.23
Ibm Websphere Application Server 7.0.0.24
Ibm Websphere Application Server 7.0.0.33
Ibm Websphere Application Server 7.0.0.34
Ibm Websphere Application Server 7.0.0.8
Ibm Websphere Application Server 7.0.0.9
Ibm Websphere Application Server 8.5.5.6
Ibm Websphere Application Server 8.5.0.0
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 8.0.0.4
Ibm Websphere Application Server 7.0.0.10
Ibm Websphere Application Server 7.0.0.11
Ibm Websphere Application Server 7.0.0.19
383
VMScore
CVE-2016-2960
IBM WebSphere Application Server (WAS) 7.x prior to 7.0.0.43, 8.0.0.x prior to 8.0.0.13, 8.5.0.x prior to 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x prior to 9.0.0.1 allows remote malicious users to cause a denial of service via crafted S...
Ibm Websphere Application Server 8.5.5.2
Ibm Websphere Application Server 8.5.0.0
Ibm Websphere Application Server 8.0.0.9
Ibm Websphere Application Server 8.0.0.12
Ibm Websphere Application Server 8.0.0.11
Ibm Websphere Application Server 7.0.0.8
Ibm Websphere Application Server 7.0.0.7
Ibm Websphere Application Server 7.0.0.36
Ibm Websphere Application Server 7.0.0.35
Ibm Websphere Application Server 7.0.0.27
Ibm Websphere Application Server 7.0.0.25
Ibm Websphere Application Server 7.0.0.18
Ibm Websphere Application Server 7.0.0.17
Ibm Websphere Application Server 7.0.0.10
Ibm Websphere Application Server 7.0.0.1
Ibm Websphere Application Server 8.5.5.0
Ibm Websphere Application Server 8.5.5.1
Ibm Websphere Application Server 8.5.5.5
Ibm Websphere Application Server 8.5.5.4
Ibm Websphere Application Server 8.0.0.4
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 8.0.0.2
383
VMScore
CVE-2016-0359
CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 7.0 prior to 7.0.0.43, 8.0 prior to 8.0.0.13, 8.5 Full prior to 8.5.5.10, and 8.5 Liberty before Liberty Fix Pack 16.0.0.2 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP respon...
Ibm Websphere Application Server 8.5.5.6
Ibm Websphere Application Server 8.5.5.5
Ibm Websphere Application Server 8.0.0.5
Ibm Websphere Application Server 8.0.0.4
Ibm Websphere Application Server 8.0
Ibm Websphere Application Server 7.0.0.39
Ibm Websphere Application Server 7.0.0.41
Ibm Websphere Application Server 7.0.0.38
Ibm Websphere Application Server 7.0.0.31
Ibm Websphere Application Server 7.0.0.3
Ibm Websphere Application Server 7.0.0.21
Ibm Websphere Application Server 7.0.0.2
Ibm Websphere Application Server 7.0.0.13
Ibm Websphere Application Server 7.0.0.12
Ibm Websphere Application Server 8.5.5.4
Ibm Websphere Application Server 8.5.0.0
Ibm Websphere Application Server 8.0.0.3
Ibm Websphere Application Server 8.0.0.2
Ibm Websphere Application Server 7.0.0.9
Ibm Websphere Application Server 7.0.0.8
Ibm Websphere Application Server 7.0.0.37
Ibm Websphere Application Server 8.5.5.8
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23316
SQL injection
type confusion
CVE-2024-20697
CVE-2024-4344
local
CVE-2024-30043
CVE-2024-3821
CVE-2024-5041
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »