Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:5.1.1.19:*:*:*:*:*:*:*

part: a version: 5.1.1.19 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0508 vulnerable 2026-06-08 04:51:09.780964 Details available
The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in (1) web-inf, (2) meta-inf, and unspecified other directories via unknown vectors, related to (a) web-based applications and (b) the administrative console.
Published: 2009-03-16T19:00:00.000Z
Updated: 2024-08-07T04:40:03.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0433 vulnerable 2026-06-08 04:51:09.473655 Details available
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, when Web Server plug-in content buffering is enabled, allows attackers to cause a denial of service (daemon crash) via unknown vectors, related to a mishandling of client read failures in which clients receive many 500 HTTP error responses and backend servers are incorrectly labeled as down.
Published: 2009-02-10T22:13:00.000Z
Updated: 2024-08-07T04:31:26.271Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4284 vulnerable 2026-06-08 04:50:38.417461 Details available
Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.x versions, 6.0.x before 6.0.2.33, and 6.1.x before 6.1.0.23 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage feature.
Published: 2009-02-10T22:13:00.000Z
Updated: 2024-08-07T10:08:34.976Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.