Page 3 of 108 results (0.009 seconds)

CVSS: 8.2EPSS: 0%CPEs: 4EXPL: 0

CVE-2021-20454

https://notcve.org/view.php?id=CVE-2021-20454

21 Apr 2021 — IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196649. IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0, es vulnerable a un ataque de tipo XML External Entity Injection (XXE) cuando se procesan datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exp... • https://exchange.xforce.ibmcloud.com/vulnerabilities/196649 • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 8.2EPSS: 0%CPEs: 3EXPL: 0

CVE-2021-20453

https://notcve.org/view.php?id=CVE-2021-20453

20 Apr 2021 — IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196648. IBM WebSphere Application Server versiones 8.0, 8.5 y 9.0, es vulnerable a un ataque de inyección de XML External Entity Injection (XXE) cuando se procesan datos XML. Un atacante remoto podría explotar esta vulnerabilidad para expon... • https://exchange.xforce.ibmcloud.com/vulnerabilities/196648 • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 6.5EPSS: 0%CPEs: 10EXPL: 0

CVE-2021-20480

https://notcve.org/view.php?id=CVE-2021-20480

08 Apr 2021 — IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197502. IBM WebSphere Application Server versiones 7.0, 8.0 y 8.5, es vulnerable a un ataque de tipo server-side request forgery (SSRF). Al enviar una petición especialmente diseñada, un atacante autenticado remotamente podría explotar esta vulnerabilidad ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/197502 • CWE-918: Server-Side Request Forgery (SSRF) •

CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2020-5016

https://notcve.org/view.php?id=CVE-2020-5016

10 Mar 2021 — IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When application security is disabled and JAX-RPC applications are present, an attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary xml files on the system. This does not occur if Application security is enabled. IBM X-Force ID: 193556. IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0, podría permitir a un atacante r... • https://exchange.xforce.ibmcloud.com/vulnerabilities/193556 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0

CVE-2021-20354

https://notcve.org/view.php?id=CVE-2021-20354

18 Feb 2021 — IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 194883. IBM WebSphere Application Server versiones 8.0, 8.5 y 9.0, podría permitir a un atacante remoto un salto de directorio. Un atacante podría enviar una petición URL especialmente diseñada que contenga secuencias "dot dot" (/../) para visualizar ar... • https://exchange.xforce.ibmcloud.com/vulnerabilities/194883 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 8.2EPSS: 7%CPEs: 4EXPL: 0

CVE-2021-20353 – IBM WebSphere EDataGraphImpl Deserialization of Untrusted Data Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2021-20353

10 Feb 2021 — IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 194882. IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0, es vulnerable a un ataque de inyección de entidad externa XML (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer inf... • https://exchange.xforce.ibmcloud.com/vulnerabilities/194882 • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 8.2EPSS: 0%CPEs: 11EXPL: 0

CVE-2020-4949

https://notcve.org/view.php?id=CVE-2020-4949

26 Jan 2021 — IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 192025. IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0, es vulnerable a un ataque de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría aprovechar esta vulnerabilidad para exponer... • https://exchange.xforce.ibmcloud.com/vulnerabilities/192025 • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2020-4782

https://notcve.org/view.php?id=CVE-2020-4782

28 Oct 2020 — IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0, podría permitir a un atacante remoto saltar directorios en el sistema. Un atacante podría enviar una petición URL especialmente diseñada que contenga secuencias "dot dot" (/../) para vis... • https://exchange.xforce.ibmcloud.com/vulnerabilities/189213 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2020-4576

https://notcve.org/view.php?id=CVE-2020-4576

01 Oct 2020 — IBM WebSphere Application Server 7.5, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive information with a specially-crafted sequence of serialized objects. IBM X-Force ID: 184428. IBM WebSphere Application Server versiones 7.5, 8.0, 8.5 y 9.0 tradicional podría permitir a un atacante remoto obtener información confidencial con una secuencia de objetos serializados especialmente diseñada. IBM X-Force ID: 184428 • https://exchange.xforce.ibmcloud.com/vulnerabilities/184428 •

CVSS: 3.3EPSS: 0%CPEs: 15EXPL: 0

CVE-2020-4629

https://notcve.org/view.php?id=CVE-2020-4629

30 Sep 2020 — IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed technical error message. This information could be used in further attacks against the system. IBM X-Force ID: 185370. IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0, podría permitir a un usuario local con acceso especializado obtener información confidencial a partir de un mensaje de error técnico detallado. Esta información podría ser... • https://exchange.xforce.ibmcloud.com/vulnerabilities/185370 • CWE-209: Generation of Error Message Containing Sensitive Information •