CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2013-3024
https://notcve.org/view.php?id=CVE-2013-3024
IBM WebSphere Application Server (WAS) 8.5 through 8.5.0.2 on UNIX allows local users to gain privileges by leveraging improper process initialization. IBM X-Force ID: 84362. IBM WebSphere Application Server (WAS) de la versión 8.5 hasta la 8.5.0.2 en UNIX permite que usuarios locales obtengan privilegios aprovechando la inicialización incorrecta de procesos. IBM X-Force ID: 84362. • http://www-01.ibm.com/support/docview.wss?&uid=swg21639553 https://exchange.xforce.ibmcloud.com/vulnerabilities/84362 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.3EPSS: 0%CPEs: 4EXPL: 0CVE-2017-1743
https://notcve.org/view.php?id=CVE-2017-1743
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console panel fields. When exploited an attacker could browse the file system. IBM X-Force ID: 134933. IBM WebSphere Application Server 7.0, 8.0, 8.5 y 9.0 podría permitir que un atacante remoto obtenga información sensible provocado por la gestión incorrecta de los campos del panel Administrative Console. Al explotarse, un atacante podría navegar por el sistema de archivos. • http://www.ibm.com/support/docview.wss?uid=swg22013601 http://www.securityfocus.com/bid/104134 http://www.securitytracker.com/id/1040890 https://exchange.xforce.ibmcloud.com/vulnerabilities/134933 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2017-1786
https://notcve.org/view.php?id=CVE-2017-1786
IBM WebSphere MQ 8.0 through 8.0.0.8 and 9.0 through 9.0.4 under special circumstances could allow an authenticated user to consume all resources due to a memory leak resulting in service loss. IBM X-Force ID: 136975. IBM WebSphere MQ, desde la versión 8.0 hasta la versión 8.0.0.8 y la versión 9.0 hasta la 9.0.4, bajo circunstancias especiales, podría permitir que un usuario autenticado consuma todos los recursos debido a una fuga de memoria que resulta en la pérdida del servicio. IBM X-Force ID: 136975. • http://www.ibm.com/support/docview.wss?uid=swg22013023 https://exchange.xforce.ibmcloud.com/vulnerabilities/136975 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2018-1371
https://notcve.org/view.php?id=CVE-2018-1371
An IBM WebSphere MQ 8.0.0.8, 9.0.0.2, and 9.0.4 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. IBM X-Force ID: 137771. Un cliente IBM WebSphere MQ 8.0.0.8, 9.0.0.2 y 9.0.4 que se conecte a MQ Queue Manager puede provocar un SIGSEGV en el proceso del canal AMQRMPPA, terminándolo. IBM X-Force ID: 137771. • http://www.ibm.com/support/docview.wss?uid=swg22012983 https://exchange.xforce.ibmcloud.com/vulnerabilities/137771 •
CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0CVE-2018-1445
https://notcve.org/view.php?id=CVE-2018-1445
IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139907. IBM WebSphere Portal, de la versión 8.0.0 hasta la 8.0.0.1, 8.5 y 9.0 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. • http://www-01.ibm.com/support/docview.wss?uid=swg22015407 http://www.securitytracker.com/id/1040647 https://exchange.xforce.ibmcloud.com/vulnerabilities/139907 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •