Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:6.1.0.22:*:*:*:*:*:*:*

part: a version: 6.1.0.22 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3305 vulnerable 2026-06-08 05:02:09.077978 Details available
Directory traversal vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file.
Published: 2012-09-25T20:00:00.000Z
Updated: 2024-08-06T19:57:50.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1683 vulnerable 2026-06-08 04:58:01.398207 Details available
IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.
Published: 2011-04-13T14:00:00.000Z
Updated: 2024-09-17T00:16:19.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1209 vulnerable 2026-06-08 04:57:57.005057 Details available
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.17 uses a weak WS-Security XML encryption algorithm, which makes it easier for remote attackers to obtain plaintext data from a (1) JAX-RPC or (2) JAX-WS Web Services request via unspecified vectors related to a "decryption attack."
Published: 2011-05-04T22:00:00.000Z
Updated: 2024-08-06T22:21:33.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3186 vulnerable 2026-06-08 04:55:13.463648 Details available
IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, when a JAX-WS application is used, does not properly handle an IncludeTimestamp setting in the WS-Security policy, which has unspecified impact and remote attack vectors.
Published: 2010-08-30T19:00:00.000Z
Updated: 2024-08-07T03:03:18.246Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1651 vulnerable 2026-06-08 04:54:09.704985 Details available
IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full trace logging for SIP) are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by reading the trace log.
Published: 2010-04-30T17:00:00.000Z
Updated: 2024-08-07T01:28:42.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1650 vulnerable 2026-06-08 04:54:09.691339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0783 vulnerable 2026-06-08 04:52:04.479434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2744 vulnerable 2026-06-08 04:51:30.304342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2089 vulnerable 2026-06-08 04:51:26.702386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2088 vulnerable 2026-06-08 04:51:26.701407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2087 vulnerable 2026-06-08 04:51:26.700103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2085 vulnerable 2026-06-08 04:51:26.695829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1172 vulnerable 2026-06-08 04:51:13.377802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0904 vulnerable 2026-06-08 04:51:11.981882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0903 vulnerable 2026-06-08 04:51:11.977485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0892 vulnerable 2026-06-08 04:51:11.905984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0891 vulnerable 2026-06-08 04:51:11.905078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0856 vulnerable 2026-06-08 04:51:11.652687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0855 vulnerable 2026-06-08 04:51:11.651812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0217 vulnerable 2026-06-08 04:51:08.413474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4284 vulnerable 2026-06-08 04:50:38.441377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.