CVSS: 6.8EPSS: 13%CPEs: 7EXPL: 0CVE-2011-0310
https://notcve.org/view.php?id=CVE-2011-0310
Buffer overflow in IBM WebSphere MQ 7.0 before 7.0.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted header field in a message. Desbordamiento de búfer en IBM WebSphere MQ v7.0 anterior a v7.0.1.4 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (caída de la aplicación) mediante un campo de cabecera manipulado en un mensaje • http://osvdb.org/70476 http://secunia.com/advisories/42958 http://www-01.ibm.com/support/docview.wss?uid=swg27014224 http://www.securityfocus.com/bid/45923 http://www.vupen.com/english/advisories/2011/0128 https://exchange.xforce.ibmcloud.com/vulnerabilities/64628 https://www-304.ibm.com/support/docview.wss?uid=swg1SE45551 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 23%CPEs: 23EXPL: 0CVE-2011-0314
https://notcve.org/view.php?id=CVE-2011-0314
Heap-based buffer overflow in IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 allows remote authenticated users to execute arbitrary code or cause a denial of service (queue manager crash) by inserting an invalid message into the queue. Desbordamiento de búfer basado en memoria dinámica en IBM WebSphere MQ v6.0 antes de v6.0.2.11 y v7.0 antes v7.0.1.5, permite a usuarios autenticados remotamente ejecutar código de su elección o causar una denegación de servicio (caída del gestor de colas) mediante la inserción de un mensaje no válido en la cola. • http://secunia.com/advisories/42941 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ81294 http://www.securityfocus.com/bid/45801 https://exchange.xforce.ibmcloud.com/vulnerabilities/64550 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 0%CPEs: 34EXPL: 0CVE-2011-0316
https://notcve.org/view.php?id=CVE-2011-0316
The Administrative Console component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request. El componente de Consola de Administración de IBM WebSphere Application Server (WAS) v6.1 antrior a v6.1.0.35 y v7.0.0.15 7.0 no restringe correctamente el acceso a la consola de servlets, lo que permite a atacantes remotos obtener información sobre el estado potencialmente sensible a través de una solicitud directa. • http://secunia.com/advisories/42938 http://www-01.ibm.com/support/docview.wss?uid=swg1PM24372 http://www-01.ibm.com/support/docview.wss?uid=swg27007951 http://www-01.ibm.com/support/docview.wss?uid=swg27014463 http://www.securityfocus.com/bid/46736 http://www.vupen.com/english/advisories/2011/0564 https://exchange.xforce.ibmcloud.com/vulnerabilities/64558 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.3EPSS: 0%CPEs: 34EXPL: 0CVE-2011-0315
https://notcve.org/view.php?id=CVE-2011-0315
Cross-site scripting (XSS) vulnerability in the Servlet Engine / Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to the lack of an error page for an application. Ejecución de secuencias de comandos en sitios cruzados (XSS) en los componentes Servlet Engine / Web Container en IBM WebSphere Application Server (WAS) 6.1 anterior a v6.1.0.35 y v7.0 antrior a v7.0.0.15 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores relacionados con el falta de una página de error para una aplicación. • http://secunia.com/advisories/42938 http://www-01.ibm.com/support/docview.wss?uid=swg1PM18512 http://www-01.ibm.com/support/docview.wss?uid=swg27007951 http://www-01.ibm.com/support/docview.wss?uid=swg27014463 http://www.securityfocus.com/bid/46736 http://www.vupen.com/english/advisories/2011/0564 https://exchange.xforce.ibmcloud.com/vulnerabilities/64554 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2010-2644
https://notcve.org/view.php?id=CVE-2010-2644
IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API requests to an EJB interface. IBM WebSphere Service Registry y Repository (WSRR) 7v.0.0 anterior FP1 no implementa el control de acceso adecuadamente, lo que permite a atacantes remotos realizar acciones de gobierno a través de peticiones API no especificadas en una interfaz EJB. • http://secunia.com/advisories/42742 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ72563 http://www-01.ibm.com/support/docview.wss?uid=swg24026132 https://exchange.xforce.ibmcloud.com/vulnerabilities/63640 • CWE-264: Permissions, Privileges, and Access Controls •