CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0CVE-2017-1235
https://notcve.org/view.php?id=CVE-2017-1235
IBM WebSphere MQ 8.0 could allow an authenticated user to cause a premature termination of a client application thread which could potentially cause denial of service. IBM X-Force ID: 123914. La versión 8.0 de IBM WebSphere MQ podría permitir que un usuario autenticado finalice de manera prematura un hilo de la aplicación cliente, lo que podría provocar una denegación de servicio. IBM X-Force ID: 123914. • http://www.ibm.com/support/docview.wss?uid=swg22005415 http://www.securityfocus.com/bid/100955 https://exchange.xforce.ibmcloud.com/vulnerabilities/123914 •
CVSS: 6.5EPSS: 0%CPEs: 19EXPL: 0CVE-2015-0110
https://notcve.org/view.php?id=CVE-2015-0110
IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL. IBM Business Process Manager (BPM) 7.5.x, 8.0.x y 8.5.x y WebSphere Lombardi Edition (WLE) 7.2.x permiten que usuarios autenticados remotos omitan las restricciones de acceso establecidas en tipos de servicios internos mediante vectores relacionados con la URL executeServiceByName. • http://www.securityfocus.com/bid/73274 https://www-304.ibm.com/support/docview.wss?uid=swg21694940 • CWE-284: Improper Access Control •
CVSS: 6.1EPSS: 0%CPEs: 57EXPL: 0CVE-2017-1189
https://notcve.org/view.php?id=CVE-2017-1189
IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123558. IBM WebSphere Portal y Web Content Manager 6.1, 7.0 y 8.0 son vulnerables a ataques de tipo Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades planeadas. • http://www.ibm.com/support/docview.wss?uid=swg22008028 http://www.securityfocus.com/bid/100699 http://www.securitytracker.com/id/1039268 https://exchange.xforce.ibmcloud.com/vulnerabilities/123558 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.9EPSS: 0%CPEs: 21EXPL: 0CVE-2017-1501
https://notcve.org/view.php?id=CVE-2017-1501
IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the web services security bindings settings. IBM X-Force ID: 129576. IBM WebSphere Application Server 8.0, 8.5 y 9.0 podría proporcionar una seguridad más débil de lo esperado después de usar la consola de administrador para actualizar la configuración de seguridad de los servicios web. IBM X-Force ID: 129576. • http://www.ibm.com/support/docview.wss?uid=swg22006810 http://www.securityfocus.com/bid/100394 http://www.securitytracker.com/id/1039199 https://exchange.xforce.ibmcloud.com/vulnerabilities/129576 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-1504
https://notcve.org/view.php?id=CVE-2017-1504
IBM WebSphere Application Server version 9.0.0.4 could provide weaker than expected security after using the PasswordUtil command to enable AES password encryption. IBM X-Force ID: 129579. IBM WebSphere Application Server en su versión 9.0.0.4 podría ofrecer una seguridad más débil después de usar el comando PasswordUtil para activar el cifrado de contraseñas AES. IBM X-Force ID: 129579. • http://www.ibm.com/support/docview.wss?uid=swg22006803 http://www.securityfocus.com/bid/100137 https://exchange.xforce.ibmcloud.com/vulnerabilities/129579 •