CVSS: 4.3EPSS: 0%CPEs: 16EXPL: 0CVE-2012-2170
https://notcve.org/view.php?id=CVE-2012-2170
The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request. La aplicación de Snoop Servlet en IBM WebSphere Application Server v7.0 anterior a v7.0.0.23 no restringe el acceso, permite a atacantes remotos obtener información sensible de los clientes y la solicitud a través de una solicitud directa. • http://www.ibm.com/support/docview.wss?uid=swg1PM56183 http://www.ibm.com/support/docview.wss?uid=swg21595172 https://exchange.xforce.ibmcloud.com/vulnerabilities/75234 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.3EPSS: 0%CPEs: 16EXPL: 0CVE-2012-0720
https://notcve.org/view.php?id=CVE-2012-0720
Cross-site scripting (XSS) vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la consola de solución de integración IBM WebSphere Application Server v7.0 anterior a v7.0.0.23 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un URL malicioso. • http://www.ibm.com/support/docview.wss?uid=swg1PM52274 http://www.ibm.com/support/docview.wss?uid=swg21595172 https://exchange.xforce.ibmcloud.com/vulnerabilities/74044 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 16EXPL: 0CVE-2012-0716
https://notcve.org/view.php?id=CVE-2012-0716
Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la consola de administración de IBM WebSphere Application Server v7.0 anterior a v7.0.0.23 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados. • http://www.ibm.com/support/docview.wss?uid=swg1PM53132 http://www.ibm.com/support/docview.wss?uid=swg21595172 http://www.securityfocus.com/bid/52722 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.8EPSS: 0%CPEs: 135EXPL: 0CVE-2012-2162
https://notcve.org/view.php?id=CVE-2012-2162
The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack. El complemento Web Server en IBM WebSphere Application Server (WAS) v8.0 y anteriores, utilizan comunicaciones sin HTTP cifrar después de la expiración de la contraseña de plugin-key.kdb, lo que permite a atacantes remotos obtener información sensible el tráfico de la red o servidores suplantar arbitrarios mediante un ataque man-in-the-middle. • http://www-01.ibm.com/support/docview.wss?uid=swg21588312 http://www-01.ibm.com/support/docview.wss?uid=swg21591172 https://exchange.xforce.ibmcloud.com/vulnerabilities/74900 • CWE-310: Cryptographic Issues •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2012-0707
https://notcve.org/view.php?id=CVE-2012-0707
Cross-site scripting (XSS) vulnerability in IBM WebSphere Lombardi Edition 7.2 allows remote attackers to inject arbitrary web script or HTML via crafted text input to a coach that is configured with a document attachment control section. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en IBM WebSphere Lombardi Edition v7.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de la introducción de texto diseñado a un entrenador que está configurado con una sección de control de documentos adjuntos. • http://secunia.com/advisories/48055 http://www-01.ibm.com/support/docview.wss?uid=swg1IC79890 https://exchange.xforce.ibmcloud.com/vulnerabilities/73376 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •