Page 46 of 828 results (0.008 seconds)

CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2017-1194

https://notcve.org/view.php?id=CVE-2017-1194

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123669. IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0 son vulnerables a falsificación de petición en sitios cruzados (CSRF) lo que podría permitir a un atacante ejecutar acciones malintencionadas y no autorizadas transmitidas a través de un usuario que confía en el sitio web. IBM X-Force ID: 123669. • http://www.ibm.com/support/docview.wss?uid=swg22001226 http://www.securityfocus.com/bid/98142 http://www.securitytracker.com/id/1038378 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 5.3EPSS: 0%CPEs: 32EXPL: 0

CVE-2017-1170

https://notcve.org/view.php?id=CVE-2017-1170

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230. Una vulnerabilidad en IBM WebSphere Commerce Enterprise, Professional, Express y Developer 8.0 podría permitir a un atacante local secuestrar la sesión de un usuario. IBM X-Force ID: 123230. • http://www.ibm.com/support/docview.wss?uid=swg22001225 http://www.securityfocus.com/bid/98027 http://www.securitytracker.com/id/1038359 •

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-1120

https://notcve.org/view.php?id=CVE-2017-1120

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000152. IBM WebSphere Portal 8.5 y 9.0 es vulnerable a secuencias de comandos de sitios cruzados. Esta vulnerabilidad permite a usuarios incrustar código JavaScript arbitrario en la IU Web alterando así la funcionalidad potencialmente prevista dirigida a la divulgación de credenciales dentro de una sesión de confianza. • http://www.ibm.com/support/docview.wss?uid=swg22000152 http://www.securityfocus.com/bid/97075 http://www.securitytracker.com/id/1038146 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-1145

https://notcve.org/view.php?id=CVE-2017-1145

IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion. IBM Reference #: 1999672. IBM WebSphere MQ 8.0.0.6 no termina correctamente los agentes de canal cuando ya no son necesarios, lo que podría permitir a un usuario causar una denegación de servicio por agotamiento de recursos. IBM Reference #: 1999672. • http://www.ibm.com/support/docview.wss?uid=swg21999672 http://www.securityfocus.com/bid/96759 http://www.securitytracker.com/id/1038068 • CWE-404: Improper Resource Shutdown or Release •

CVSS: 8.1EPSS: 0%CPEs: 4EXPL: 0

CVE-2017-1151

https://notcve.org/view.php?id=CVE-2017-1151

IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293. IBM WebSphere Application Server 8.0, 8.5, 8.5.5 y 9.0 usando OpenID Connect (OIDC) configurado con un interceptor de asociación de confianza (TAI) podría permitir a un usuario obtener elevados privilegios en el sistema. IBM Reference #: 1999293. • http://www.ibm.com/support/docview.wss?uid=swg21999293 http://www.securityfocus.com/bid/96841 http://www.securitytracker.com/id/1037984 •