Websphere Application Server
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_application_server:5.1.1.18:*:*:*:*:*:*:*
part: a version: 5.1.1.18 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-0433 |
vulnerable | 2026-06-08 04:51:09.473094 |
Details available
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, when Web Server plug-in content buffering is enabled, allows attackers to cause a denial of service (daemon crash) via unknown vectors, related to a mishandling of client read failures in which clients receive many 500 HTTP error responses and backend servers are incorrectly labeled as down.
Published: 2009-02-10T22:13:00.000Z
Updated: 2024-08-07T04:31:26.271Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4284 |
vulnerable | 2026-06-08 04:50:38.412055 |
Details available
Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.x versions, 6.0.x before 6.0.2.33, and 6.1.x before 6.1.0.23 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage feature.
Published: 2009-02-10T22:13:00.000Z
Updated: 2024-08-07T10:08:34.976Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4283 |
vulnerable | 2026-06-08 04:50:38.410068 |
Details available
CRLF injection vulnerability in the WebContainer component in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.1.x versions allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Published: 2009-02-10T22:13:00.000Z
Updated: 2024-08-07T10:08:35.151Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3236 |
vulnerable | 2026-06-08 04:50:33.601497 |
Details available
Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to "previously encrypted properties" that are not encrypted.
Published: 2008-07-21T16:00:00.000Z
Updated: 2024-08-07T09:28:41.821Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3235 |
vulnerable | 2026-06-08 04:50:33.600584 |
Details available
Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 has unknown impact and attack vectors.
Published: 2008-07-21T16:00:00.000Z
Updated: 2024-08-07T09:28:41.908Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.