Page 15 of 162 results (0.018 seconds)

CVSS: 6.5EPSS: 0%CPEs: 19EXPL: 0

CVE-2015-0110

https://notcve.org/view.php?id=CVE-2015-0110

IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL. IBM Business Process Manager (BPM) 7.5.x, 8.0.x y 8.5.x y WebSphere Lombardi Edition (WLE) 7.2.x permiten que usuarios autenticados remotos omitan las restricciones de acceso establecidas en tipos de servicios internos mediante vectores relacionados con la URL executeServiceByName. • http://www.securityfocus.com/bid/73274 https://www-304.ibm.com/support/docview.wss?uid=swg21694940 • CWE-284: Improper Access Control •

CVSS: 5.9EPSS: 0%CPEs: 21EXPL: 0

CVE-2017-1501

https://notcve.org/view.php?id=CVE-2017-1501

IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the web services security bindings settings. IBM X-Force ID: 129576. IBM WebSphere Application Server 8.0, 8.5 y 9.0 podría proporcionar una seguridad más débil de lo esperado después de usar la consola de administrador para actualizar la configuración de seguridad de los servicios web. IBM X-Force ID: 129576. • http://www.ibm.com/support/docview.wss?uid=swg22006810 http://www.securityfocus.com/bid/100394 http://www.securitytracker.com/id/1039199 https://exchange.xforce.ibmcloud.com/vulnerabilities/129576 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.4EPSS: 0%CPEs: 4EXPL: 0

CVE-2017-1380

https://notcve.org/view.php?id=CVE-2017-1380

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127151. IBM WebSphere Application Server 7.0, 8.0, 8.5 y 9.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. • http://www.ibm.com/support/docview.wss?uid=swg22004786 http://www.securityfocus.com/bid/99961 http://www.securitytracker.com/id/1038978 https://exchange.xforce.ibmcloud.com/vulnerabilities/127151 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 0

CVE-2017-1382

https://notcve.org/view.php?id=CVE-2017-1382

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153. IBM WebSphere Application Server versión 7.0,versión 8.0,versión 8.5 y versión 9.0 podría crear archivos usando los permisos por defecto en lugar de los permisos personalizados cuando se usan scripts de inicio personalizados. Un atacante local podría explotar esto para obtener acceso a archivos con un impacto desconocido. • http://www.ibm.com/support/docview.wss?uid=swg22004785 http://www.securityfocus.com/bid/99960 http://www.securitytracker.com/id/1038977 https://exchange.xforce.ibmcloud.com/vulnerabilities/127153 • CWE-276: Incorrect Default Permissions •

CVSS: 3.3EPSS: 0%CPEs: 4EXPL: 0

CVE-2017-1381

https://notcve.org/view.php?id=CVE-2017-1381

IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information, caused by stale data being cached and then served. IBM X-Force ID: 127152. IBM WebSphere Application Server Proxy Server o On-demand-router (ODR) versión 7.0,versión 8.0,versión 8.5,versión 9.0 podría permitir a un atacante local obtener información confidencial, causada por el almacenamiento de datos antiguos. ID de IBM X-Force: 127152. • http://www.ibm.com/support/docview.wss?uid=swg22004792 http://www.securityfocus.com/bid/99917 http://www.securitytracker.com/id/1038985 https://exchange.xforce.ibmcloud.com/vulnerabilities/127152 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •