Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:6.0.2.28:*:*:*:*:*:*:*

part: a version: 6.0.2.28 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4816 vulnerable 2026-06-08 05:05:46.106766 Details available
Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Published: 2014-09-23T22:00:00.000Z
Updated: 2024-08-06T11:27:36.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4770 vulnerable 2026-06-08 05:05:45.880385 Details available
Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL.
Published: 2014-09-23T22:00:00.000Z
Updated: 2024-08-06T11:27:36.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0964 vulnerable 2026-06-08 05:05:15.299744 Details available
IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.
Published: 2014-05-16T10:00:00.000Z
Updated: 2024-08-06T09:34:41.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2162 vulnerable 2026-06-08 05:00:53.109877 Details available
The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.
Published: 2012-05-01T19:00:00.000Z
Updated: 2024-08-06T19:26:08.460Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1683 vulnerable 2026-06-08 04:58:01.392013 Details available
IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.
Published: 2011-04-13T14:00:00.000Z
Updated: 2024-09-17T00:16:19.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1318 vulnerable 2026-06-08 04:57:57.695914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1316 vulnerable 2026-06-08 04:57:57.690572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1315 vulnerable 2026-06-08 04:57:57.686456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1314 vulnerable 2026-06-08 04:57:57.681374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1311 vulnerable 2026-06-08 04:57:57.675269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1309 vulnerable 2026-06-08 04:57:57.670392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1308 vulnerable 2026-06-08 04:57:57.665671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1307 vulnerable 2026-06-08 04:57:57.647078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3271 vulnerable 2026-06-08 04:55:13.899274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1650 vulnerable 2026-06-08 04:54:09.690106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0777 vulnerable 2026-06-08 04:52:04.425881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0776 vulnerable 2026-06-08 04:52:04.423865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0775 vulnerable 2026-06-08 04:52:04.421890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0774 vulnerable 2026-06-08 04:52:04.412813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3106 vulnerable 2026-06-08 04:51:32.376021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2747 vulnerable 2026-06-08 04:51:30.325860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2746 vulnerable 2026-06-08 04:51:30.309129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1901 vulnerable 2026-06-08 04:51:25.621389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1900 vulnerable 2026-06-08 04:51:25.620373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1899 vulnerable 2026-06-08 04:51:25.619179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1898 vulnerable 2026-06-08 04:51:25.616088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0891 vulnerable 2026-06-08 04:51:11.904527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0436 vulnerable 2026-06-08 04:51:09.496816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0434 vulnerable 2026-06-08 04:51:09.481925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0433 vulnerable 2026-06-08 04:51:09.480112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0217 vulnerable 2026-06-08 04:51:08.397766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4284 vulnerable 2026-06-08 04:50:38.434851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.