Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:6.1.0.20:*:*:*:*:*:*:*

part: a version: 6.1.0.20 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3305 vulnerable 2026-06-08 05:02:09.076739 Details available
Directory traversal vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file.
Published: 2012-09-25T20:00:00.000Z
Updated: 2024-08-06T19:57:50.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3186 vulnerable 2026-06-08 04:55:13.462615 Details available
IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, when a JAX-WS application is used, does not properly handle an IncludeTimestamp setting in the WS-Security policy, which has unspecified impact and remote attack vectors.
Published: 2010-08-30T19:00:00.000Z
Updated: 2024-08-07T03:03:18.246Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1651 vulnerable 2026-06-08 04:54:09.704952 Details available
IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full trace logging for SIP) are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by reading the trace log.
Published: 2010-04-30T17:00:00.000Z
Updated: 2024-08-07T01:28:42.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1650 vulnerable 2026-06-08 04:54:09.691218 Details available
IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11, when the -trace option (aka debugging mode) is enabled, executes debugging statements that print string representations of unspecified objects, which allows attackers to obtain sensitive information by reading the trace output.
Published: 2010-04-30T17:00:00.000Z
Updated: 2024-08-07T01:28:42.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0783 vulnerable 2026-06-08 04:52:04.478642 Details available
Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-11-09T20:00:00.000Z
Updated: 2024-08-07T00:59:39.045Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2744 vulnerable 2026-06-08 04:51:30.304308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2089 vulnerable 2026-06-08 04:51:26.702354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2088 vulnerable 2026-06-08 04:51:26.701375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2087 vulnerable 2026-06-08 04:51:26.700070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2085 vulnerable 2026-06-08 04:51:26.694812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1172 vulnerable 2026-06-08 04:51:13.377766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0904 vulnerable 2026-06-08 04:51:11.981846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0903 vulnerable 2026-06-08 04:51:11.977445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0892 vulnerable 2026-06-08 04:51:11.905952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0891 vulnerable 2026-06-08 04:51:11.905045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0856 vulnerable 2026-06-08 04:51:11.652655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0855 vulnerable 2026-06-08 04:51:11.651776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0434 vulnerable 2026-06-08 04:51:09.482246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0217 vulnerable 2026-06-08 04:51:08.412461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4284 vulnerable 2026-06-08 04:50:38.440364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.