Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:6.0.2.25:*:*:*:*:*:*:*

part: a version: 6.0.2.25 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4816 vulnerable 2026-06-08 05:05:46.106731 Details available
Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Published: 2014-09-23T22:00:00.000Z
Updated: 2024-08-06T11:27:36.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4770 vulnerable 2026-06-08 05:05:45.879412 Details available
Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL.
Published: 2014-09-23T22:00:00.000Z
Updated: 2024-08-06T11:27:36.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0964 vulnerable 2026-06-08 05:05:15.298688 Details available
IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.
Published: 2014-05-16T10:00:00.000Z
Updated: 2024-08-06T09:34:41.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2162 vulnerable 2026-06-08 05:00:53.108808 Details available
The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.
Published: 2012-05-01T19:00:00.000Z
Updated: 2024-08-06T19:26:08.460Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0193 vulnerable 2026-06-08 05:00:39.837071 Details available
IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Published: 2012-01-20T02:00:00.000Z
Updated: 2024-08-06T18:16:19.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1683 vulnerable 2026-06-08 04:58:01.391972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1318 vulnerable 2026-06-08 04:57:57.695758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1316 vulnerable 2026-06-08 04:57:57.690539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1315 vulnerable 2026-06-08 04:57:57.686423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1314 vulnerable 2026-06-08 04:57:57.681342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1311 vulnerable 2026-06-08 04:57:57.675237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1309 vulnerable 2026-06-08 04:57:57.670357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1308 vulnerable 2026-06-08 04:57:57.665637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1307 vulnerable 2026-06-08 04:57:57.645893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3271 vulnerable 2026-06-08 04:55:13.898320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2327 vulnerable 2026-06-08 04:55:06.815585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1650 vulnerable 2026-06-08 04:54:09.690069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0779 vulnerable 2026-06-08 04:52:04.449168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0777 vulnerable 2026-06-08 04:52:04.425847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0776 vulnerable 2026-06-08 04:52:04.423832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0775 vulnerable 2026-06-08 04:52:04.421858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0774 vulnerable 2026-06-08 04:52:04.411995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0770 vulnerable 2026-06-08 04:52:04.385430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0769 vulnerable 2026-06-08 04:52:04.384011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0768 vulnerable 2026-06-08 04:52:04.367932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3106 vulnerable 2026-06-08 04:51:32.375986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2747 vulnerable 2026-06-08 04:51:30.325825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2746 vulnerable 2026-06-08 04:51:30.309092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1901 vulnerable 2026-06-08 04:51:25.621357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1900 vulnerable 2026-06-08 04:51:25.620339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1899 vulnerable 2026-06-08 04:51:25.619141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1898 vulnerable 2026-06-08 04:51:25.615044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0891 vulnerable 2026-06-08 04:51:11.904491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0508 vulnerable 2026-06-08 04:51:09.781200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0436 vulnerable 2026-06-08 04:51:09.496784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0434 vulnerable 2026-06-08 04:51:09.481890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0433 vulnerable 2026-06-08 04:51:09.478570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0217 vulnerable 2026-06-08 04:51:08.397256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4679 vulnerable 2026-06-08 04:50:47.622049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4678 vulnerable 2026-06-08 04:50:47.615551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4284 vulnerable 2026-06-08 04:50:38.433855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0389 vulnerable 2026-06-08 04:50:10.895436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.