Websphere Application Server
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_application_server:6.1.0.26:*:*:*:*:*:*:*
part: a version: 6.1.0.26 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-3305 |
vulnerable | 2026-06-08 05:02:09.080383 |
Details available
Directory traversal vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file.
Published: 2012-09-25T20:00:00.000Z
Updated: 2024-08-06T19:57:50.547Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3186 |
vulnerable | 2026-06-08 04:55:13.466050 |
Details available
IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, when a JAX-WS application is used, does not properly handle an IncludeTimestamp setting in the WS-Security policy, which has unspecified impact and remote attack vectors.
Published: 2010-08-30T19:00:00.000Z
Updated: 2024-08-07T03:03:18.246Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1651 |
vulnerable | 2026-06-08 04:54:09.705057 |
Details available
IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full trace logging for SIP) are enabled, logs the entirety of all inbound and outbound SIP messages, which allows local users to obtain sensitive information by reading the trace log.
Published: 2010-04-30T17:00:00.000Z
Updated: 2024-08-07T01:28:42.666Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1650 |
vulnerable | 2026-06-08 04:54:09.691532 |
Details available
IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11, when the -trace option (aka debugging mode) is enabled, executes debugging statements that print string representations of unspecified objects, which allows attackers to obtain sensitive information by reading the trace output.
Published: 2010-04-30T17:00:00.000Z
Updated: 2024-08-07T01:28:42.983Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0783 |
vulnerable | 2026-06-08 04:52:04.481385 |
Details available
Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-11-09T20:00:00.000Z
Updated: 2024-08-07T00:59:39.045Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2744 |
vulnerable | 2026-06-08 04:51:30.307943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.