Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:6.0.2.41:*:*:*:*:*:*:*

part: a version: 6.0.2.41 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4816 vulnerable 2026-06-08 05:05:46.106925 Details available
Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Published: 2014-09-23T22:00:00.000Z
Updated: 2024-08-06T11:27:36.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4770 vulnerable 2026-06-08 05:05:45.885105 Details available
Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL.
Published: 2014-09-23T22:00:00.000Z
Updated: 2024-08-06T11:27:36.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0964 vulnerable 2026-06-08 05:05:15.304423 Details available
IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.
Published: 2014-05-16T10:00:00.000Z
Updated: 2024-08-06T09:34:41.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1683 vulnerable 2026-06-08 04:58:01.396640 Details available
IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.
Published: 2011-04-13T14:00:00.000Z
Updated: 2024-09-17T00:16:19.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2327 vulnerable 2026-06-08 04:55:06.823330 Details available
mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service (daemon fail) via an upload.
Published: 2010-06-18T18:00:00.000Z
Updated: 2024-09-16T16:27:42.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0779 vulnerable 2026-06-08 04:52:04.454766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.